I need some help to complete my assignments
ASSESSMENT VALIDATION INSTRUMENT BHI & CAE ASSESSMENT COVER SHEET This form must be attached to the front of all submitted hard copy assessments. Student Details: Student to complete Student Name: Insert your name here Student ID : Insert your Student ID here Student Declaration: By signing below, I declare that the work submitted here is my own work and it does not include work which is plagiarised, copied in whole or in part from another student or other source such as published books, internet or journals without due acknowledgement in the text. Student Signature: Insert your Signature here Date: Insert the date you submitted this assessment Assessment Details: Teacher to complete Course National ID and Title 22334VIC Certificate IV in Cyber Security Unit/s National ID and Title VU21994 – Perform basic cyber security data analysis Assessment Task number and name Assessment Task 3: Splunk Comprehensive Lab Date due: Session 8 Date submitted: Blank if submission is through StudentWeb Assessor Name: Martin Tran Le Bui Matthew Krins Assessment Result and Feedback Result |_| Satisfactory |_| Not yet Satisfactory Re-submit date if required: Feedback: Assessor’s signature: Date: Assessment Review If you believe that you have been assessed unfairly, you have the right to request an informal assessment review. When your assessment cover sheet is returned to you, you can request an informal review by filling in the section below and returning it to your assessor or the Operations Manager of your area. If you are not satisfied with the outcome, you can apply for a formal review of assessment on the application form located on the Box Hill Institute Website https://goo.gl/Pb3Rtx VCE courses: VCAA rules and regulations replace the above assessment review. Please see your VCE Teacher or VCE Coordinator for further discussion. I request a review of my assessment for the following reasons (not applicable to VCE courses): Student Signature Date Instructions to Student Assessment task name Assessment Task 3: Splunk Comprehensive Lab Assessment task type Structured Activities Time allowed Up to week 8 Where the assessment will take place In timetabled classroom (N1.1XX) Nelson Campus Personal protective equipment required N/A Emergency procedures Report Issues to Teacher or coordinators as appropriate Equipment provided PC on campus during class time Individual or group work Individual Support equipment allowed i.e.: calculator, dictionary All tools as appropriate for the assessment Context and conditions of assessment Evidence should show competency working in a realistic environment and a variety of conditions. The candidate will have access to all tools, equipment, materials and documentation required. The candidate will be permitted to refer to any relevant workplace procedures, product and manufacturing specifications, codes, standards, manuals and reference materials. This unit may be assessed on the job, off the job or a combination of both. Where assessment occurs off the job, then an appropriate simulation must be used where the range of conditons reflects realistic workplace situations. The competencies covered by this unit would be demonstrated by an individual working alone or as part of a team. The assessment environment should not disadvantage the candidate. What to submit This completed document with all answers completed, coversheet filled out then submitted to StudentWeb under the AT3: Splunk Comprehensive Lab section How to submit Submit the completed document (this document) to the AT3: Splunk Comprehensive Lab section on StudentWeb. How to present your work A word document or PDF How many attempts at assessment are permitted Students will be given 2 attempts to submit an assessment; additional attempts must be organized with teacher and student prior to submission. Naming protocol for electronic files YourName_AT3-Splunk Comprehensive Lab.docx / .pdf How will the assessment judgement be made |_| Observation checklist |_| Exemplar |_|Performance checklist |_| Rubric |X| Answer guide |_| - Safety If at any time during the learning and assessment process, your Trainer/Assessor considers that the safety of any person is at risk they will abort the session. Reasonable Adjustment Students identifying as having a disability may access reasonable adjustment to enable them to participate in training and assessment on the same basis as other students. Students can learn more about this through the Learners with a disability policy and procedure on the Box Hill Institute website http://www.boxhill.edu.au/for-students/student-support or by calling Student Life on 9286 9891, by emailing the Disability liaison service on
[email protected] or by calling into the Student Life office at Elgar Campus in E3.G56, just near the cafeteria. Special Consideration Where a student anticipates that a result will be impacted by special circumstances such as ill health or bereavement, application can be made for special consideration. Forms can be accessed from the Student Life office at Elgar Campus in E3.G56 or downloaded at: http://www.boxhill.edu.au/for-students/student-information/forms-and-downloads. VCE courses: Supplementary exam procedures apply. Please see your VCE Teacher or VCE Coordinator for further discussion. Please read all assessment instructions to ensure you are clear and fully understand the requirements as outlined in each assessment task. To successfully complete this assessment task, you must meet requirements for all criteria as listed below. Where you are unsuccessful or you are required to provide further evidence your teacher will provide feedback and request further evidence as needed. It is important that you clearly understand all the requirements of this assessment task. If you have difficulty with the assessment terms or the steps to follow please speak to your teacher as soon as possible. Your teacher is your first point of contact when you need clarification and they will provide additional information as required to help you. For this assessment task, you will use Splunk enterprise software to import and analyse “Big Data” for trends and discrepancies. The assessment must be completed individually. On the following pages there are questions for you to answer spilt into three sections. You must complete all sections of the document satisfactorily. Section 1: Splunk Setup In this section, you will be assessed on how you setup and configure your Splunk environment ready for data sources. You will be required to setup two user accounts of different access levels. · User 1 must be an administrator · User 2 must have a power user role Section 2: Adding data to Splunk In this section, you will be assessed on your knowledge of Big data types and how they can be imported and configured inside of Splunk. You will setup data for a range of sources including web access log, Linux web server and database records. Section 3: Data Analysing In this section, you will be assessed on your ability to refine searches, detect abnormalities and view trend data in the given data sources. For this assessment, you will be given three data source files to import and configure to answer the questions on the next pages. These files can be found on the” Assessment Task 3: Splunk Comprehensive Lab” page in StudentWeb. If you are having trouble locating the files, please contact your tutor straight away. . Section 1: Splunk Setup Answer the following questions about how you have setup your Splunk environment. You must answer each question in your own words. This assessment task is to completed individually Where you have used images or content from another creator you must make reference to this in the space provided. Questions: 1. What is Splunk and what does it do? Answer: 2. Which version of Splunk will you be using for this assessment? Answer: 3. Create two users for your Splunk setup. One user must have an administrator role and the other user have be a Power User role. Take a screenshot of your Users accounts page after you have added both users. Answer: 4. Describe one benefit of having different user roles and access levels Answer: Section 2: Adding data to Splunk Answer the following questions about how you have setup your Splunk data sources. You must answer each question in your own words. This assessment task is to completed individually Where you have used images or content from another creator you must make reference to this in the space provided. Questions: 1. List and describe 3 different data source types you can use in Splunk. Answer: 2. Import the “db_audit_30DAY.csv" data source into Splunk and rename the data source to “db_audit – (Your Name)”. Take a screenshot of the review page once completed. Answer: 3. Import the “linux_s_30DAY.log " data source into Splunk and rename the data source to “web_server – (Your Name)”. Take a screenshot of the review page once completed. Answer: 4. Import the “access_30DAY " data source into Splunk and rename the data source to “Web_application – (Your Name)”.Take a screenshot of the review page once completed. Answer: Section 3: Data Analysing Answer the following questions about searching through data sources in Splunk. You must answer each question in your own words. This assessment task is to completed individually Where you have used images or content from another creator you must make reference to this in the space provided. Questions: 1. Perform a basic search for errors and any type of failures in all data sources. Provide a screenshot of the entire page once completed. Answer: 2. Perform a new search for password and any type of failures on port 22 in all data sources. Provide a screenshot of the entire page once completed. Answer: 3. Do you see trends over time? If so, what was it? Answer: 4. Use the output of your search to refine the results by adding a new field to the search Answer: 5. Take a screenshot of your ‘Activity Jobs Menu’ detailing the current job saved with expiration date. Answer: BHI Quality Management System Assessment Cover Sheet Version 5: 2018. Page 6 of 6