Topic: Network Design Diagram
Detailed Question: Network Design Diagram
Provide a network design diagram that clearly shows an appropriate network configuration to meet the requirements, with components properly labeled.
High Proficiency: Appropriate network types, components, devices and equipment are identified and accurately address the requirements.
Moderate Proficiency: Network types, components, devices and equipment identified are somewhat appropriate; and/or may only partially address the requirements, including the security requirements, of the proposed solution.
Non-Proficient: No network types, components, devices or equipment are provided; or recommendation fails to address requirements
As you design and submit your network security diagrams, please keep in mind a few concepts. The first is "defense in depth". You must think in terms of layered security. You cannot simply add a firewall to your network and consider it secure. The more roadblocks you have in place to frustrate and stop attackers, the more likely it is that they will leave and attack a softer target instead. Think firewalls, segregated networks,hardening services and devices. I've seen systems locked down, but their FTP server was wide open. From there I could log in anonymously, and use directory traversal (that is, looking at other files aside from the FTP server's) to identify other weaknesses in the network.
That brings up the idea of money. How much of a budget do you have, and what is the company willing to spend on security? Surprisingly, aside from SIEM solutions (Google it), it's really a matter of employee training, locking down services, and designing your network right the first time. This is extraordinarily cheap, and will keep your network safer than many others.
Finally, a word of advice: If you want to work in INFOSEC, learn these things. I haven't seen any job that doesn't test your knowledge and hands on capabilities for these jobs. The Labsims are a great resource for understanding a lot of concepts you'll likely be asked about, and the project you are working on reinforces a number of best practices.