Assessment 3: Lab
Overview of Labs
You are required to complete two labs which are:
Lab 1 - you will set up and implement two network controls, a password policy and an audit policy to track failed logons
Lab 2- you will monitor the audit policy by generating a failed logon attempt and view the log file entry that your policy has created.
For lab resources please refer to page-2 of this assessment resources summary.
Lab 1 Set up and implement network controls
Scenario: You have been asked by hotel management to set up and implement appropriate network security controls to support the new network security plan. Management wants the password policy to be set so that passwords have to be changed at least every 90 days, and that all failed logon attempts are logged in the security log for later investigation.
Instructions:
Edit the local security policy to set password policy so that the maximum age of a password is 90 days, and that all failed logon attempts are logged in the security log. Note that you need administrative rights on the Windows computer in order to change these settings - if you are using a level 10 lab computer, you can sign on using the Administrator account and the password abc@123.
Take a screenshot of your new password and security policies for evidence you have completed the labs. The screenshots should look similar to the images below:
Password policy change
Audit policy change
Lab 2 - Monitoring your network control
Scenario:
Now you are going to monitor the network control you set up in the previous lab by viewing the effect of policy violations in the Windows Security log
Instructions:
Create a user Snnnnn (where Snnnnn is your student number) in Windows 2012, assign them to the Administrators group, and give them a password.
Logoff and attempt to logon as that user, deliberately entering an incorrect password (to generate a policy breach)
Enter the correct password, and logon and view the Security Log. You should see evidence of the policy breach in the log similar to that shown below
Save the screenshot of the security log as evidence you have completed the lab.
Attachment:- Labs-Assignment.rar