Penetration Testing Assessment-2 (TECH5100) Assignment Help
Your Task
This assessment is to be completed individually. In this assessment, you will conduct individual research and produce an incident analysis report for any two cybersecurity incidents that might have happened to an organisation based on a case study scenario below.
Assessment Description
In this assessment:
• You will research cyber security incidents and document different observable attack techniques, tactics, and procedures (TTPs), their impact on the organisation, and potential risks associated with these attacks based on the scenario below.
• You are to provide a critical analysis of each attack phase, detailing vulnerabilities and entry points exploited by attackers for any incident.
The objective of this assessment is to help you develop research skills and the ability to assess and analyse various cybersecurity incidents, and threats. You are then required to recommend countermeasures based on the content covered during Weeks 4 to 7 using a real-world scenario focusing on:
1. Social Engineering Assessment
a. Analyse the different social engineering methods that could have been used in the recent incident above to gain unauthorised access.
b. Investigate and document how the social engineering tactics used affected the organisation’s security posture.
2. Scanning and Enumeration Analysis
a. Explore the different ways that the intruders could have used to conduct scanning and enumeration to identify potential vulnerabilities within the organisation network. b. Identify any weaknesses that the intruders could have exploited through the scanning and enumeration phases.
3. Network Exploitation and Post-Exploitation Assessment
a. Investigate the different methods that the intruders may have used to exploit vulnerabilities in the network, gain unauthorised access, and pivot into sensitive areas. b. Analyse how the post-exploitation activities such as privilege escalation or data exfiltration may have been done.
4. Active Directory Attack Evaluation
a. Highlight the impact that may have been witnessed because of Active Directory attacks on the organisation’s infrastructure and user accounts.
b. Explain how the attackers may have gained control or manipulated the directory services.
Scenario
As a newly employed cybersecurity consultant, you are presented with an incident involving a medium-sized organisation. The organisation recently experienced a series of cyber incidents, and your task is to conduct a comprehensive incident analysis and propose defence strategies against various cyber-attack techniques that have impacted it.
The organisation runs an extensive network infrastructure comprising hospital patient databases, medical records, and administrative systems. The recent cyber incidents have caused disruptions in service, potential data breaches, and concerns about the integrity of patient information.
Assessment Practical Business Purpose
• The incident analysis report you will generate in this assessment will equip you with the skills needed to assess, understand, analyse, and mitigate specific cybersecurity threats, which is essential for organisations aiming to strengthen their security posture.
Assessment Targeted Audience
• This assessment is useful to different organisations and people including Security analysts, IT administrators, and organisations looking to enhance their security posture. • Finishing this assessment will equip you with confidence to contribute knowledge about cybersecurity incidents, threats and countermeasures for different roles in different organisations.
This assessment aims to achieve the following subject learning outcomes:
Assessment Instructions
Assessment instructions for this assessment:
1. Individually, you are required to analyse two cyber security incidents and the threat’s potential impact on the organisation’s systems, networks, and applications.
2. Conduct external research that will give you at least five (5) sources of information from various sources. E.g., websites, social media sites, industry reports, census data, journal articles, and newspaper articles
a) ChatGPT or other generative AI tools may be used for brainstorming purposes, but your conversation must be attached to your report in an appendix to show the brainstorming process. Any copying and pasting of AI text is a form of plagiarism and will be detected by Turnitin.
b) You can use any referencing style of your choice, but KBS’s Academic Success Centre team can support you in using Kaplan Harvard Referencing.
3. Suggest a range of defensive security measures to prevent exploitation, enhance network monitoring and segmentation, and implement secure Active Directory configurations. 4. Finally, prepare a detailed and professional incident analysis report outlining the analysis of each incident technique and recommended countermeasures or proposed defensive strategies. 5. Present findings in a structured and clear format suitable for organisational stakeholders.
Additional tips
• You must use clear and concise language to communicate your ideas effectively. • Follow a professional report format with a cover page, table of contents, headings for sections, page numbers, and reference section following any professional and consistent styling.
• You must submit your report in Word or PDF format via MyKBS.
• Refer to the assessment marking guide to assist you in completing all the assessment criteria.
Important Study Information
Academic Integrity Policy
KBS values academic integrity. All students must understand the meaning and consequences of cheating, plagiarism and other academic offences under the Academic Integrity and Conduct Policy.
What is academic integrity and misconduct?
What are the penalties for academic misconduct?
What are the late penalties?
How can I appeal my grade?
Word Limits for Written Assessments
Submissions that exceed the word limit by more than 10% will cease to be marked from the point at which that limit is exceeded.
Study Assistance
Students may seek study assistance from their local Academic Learning Advisor or refer to the resources on the MyKBS Academic Success Centre page. Click here for this information.
Assessment Marking Guide
Leave A Comment