Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 1 of 7 ICT/Lidcombe TAFE College Unit code ICTNWK616 Unit name and release number Manage security, privacy &...

hi


Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 1 of 7 ICT/Lidcombe TAFE College Unit code ICTNWK616 Unit name and release number Manage security, privacy & compliance of cloud service deployment Unit code ICTSUS601 Unit name and release number Integrate sustainability in ICT planning and design projects Please note that TAFE NSW is required to retain copies of all completed assessments, where practical, for a minimum period of three (3) years (or in accordance with regulatory/licencing requirements) after the completion of a learner’s studies. Refer to procedure to determine the retention period required. Assessment Instructions This is assessment event number 01 of 02 Assessment overview This is an “Open Book” assessment event. You may consult reference material to complete this assessment. Student must be competent in each task outlined in the assessment. Instructions for Written Assessment Write your name on each page of this assessment task Please submit YOUR OWN INDIVIDUAL and ORIGINAL work Plagiarism or copying from another person is a breach of TAFE policy and an infringement of the Copyright Act which will result in disciplinary action and a FAIL being awarded for the units. Submission instructions Students have to be submitted the written tasks electronically, with a cover page. What do I need to do to achieve a satisfactory result? All criteria must be addressed to successfully complete this assessment event. Due date Week 17 Assessment feedback, review or appeals Feedback must be provided to the you no later than 10 days after all assessment activities have been conducted. If you want a review of your results or if you have any concerns about your results, you can contact the teacher/assessor or your Head Teacher. You have three weeks from the date you receive your results in which to make an appeal and/or request a review. You should receive a response within ten days of the receipt of the request. Teachers and their Head Teacher will address any appeal in accordance with Assessment Guidelines for TAFE NSW. https://staff.tafensw.edu.au/policies-procedures/student-administration/assessment-guidelines/ Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 2 of 7 SUBMISSION COVER SHEET AND DECLARATION Learner number: Learner name: Unit code: ICTSUS601 Unit name: Integrate sustainability in ICT planning and design projects Unit code: ICTNWK616 Unit name: Manage security, privacy & compliance of cloud service deployment Assessment event number 01 of 02 Assessment title Project Learner declaration This assignment is my original work and no part of it has been copied from any other source except where due acknowledgement is made. No part of this assignment has been written for me by any other person except where such collaboration has been authorised by the assessor concerned. I understand that plagiarism in the presentation of the work, idea or creation of another person as though it is your own. Plagiarism occurs when the origin of the material used is not appropriately cited. No part of this assignment is plagiarised. I understand that TAFE NSW is required to retain copies of all my completed assessments, where practical, for a period of 3 years (or in accordance with regulatory/licencing requirements) after the completion of my studies Learner Signature: Date: Make sure you have written your name on each page of your submission before attaching the cover sheet and submitting to your teacher/assessor for marking Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 3 of 7 Proposed Migration Project An Australian based SME “Company A” that provides Medical services and solutions to a privately own business Medical Pty. ‘Company A’ comprises of 50 employees within offices in Australia. It has an organizational structure based on functional divisions:  Administration  Engineering  Support “Company A” has built an online medical social networking and diagnosis assistance application for users in APAC. The application connects patients and doctors to:  Allow online appointments, remote consultation, remote diagnosis, electronic prescription transfer, and payment services.  Allow customers to upload documents and images. Text is extracted from documents, and images are converted into multiple formats. The current architecture has three tiers: a web tier, a database tier, and an application tier. They are configured as follows: • Web Tier • Six virtual machines (Two vCPUs / 4-GB memory) • Red Hat Enterprise Linux 7.5 • Apache Tomcat web service • PHP server and PHP files • Application Tier • Five virtual servers (Four vCPUs / 16-GB memory) • Red Hat Enterprise Linux 7.5 • Java SRE 7/Java application files • Database Tier • Two virtual machines (Eight vCPUs/ 32-GB memory / 5.5-TB storage) • Red Hat Enterprise Linux 7.5 • MySQL 5.7.22 database cluster Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 4 of 7 The system infrastructure was deployed in ‘Company A’s data centre and went live in 2014. Since then, ‘Company A’s support department have been maintaining the system and solving any problems that have risen. Your task is to investigated how the same system could be deployed using a public cloud provider. Based on the discussions and current architecture diagrams following customer requirements:  Infrastructure managed by members of the new Cloud Team.  Encryption for data in transit and at rest.  Secured access and identity management.  Baseline identified for the number and type of instances needed.  Recovery Point Objective (RPO) for the application is four hours.  Scalability that accommodates user base growth of 90% in the next three years.  Storage for documents and pictures that must be kept five years. Note: these files are rarely requested after three months but infrequent access is still required.  Use of managed services to enhance availability and lower costs. Below is a conceptual model (illustration purposes only) of how the above can be deployed in Cloud. Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 5 of 7 Task 1: Determine how to manage enterprise cloud security controls for the given scenario. 1.1. Identify the delivery models and deployment models for the cloud technology and choose the appropriate model for the given scenario. 1.2. Identify the cloud security issues faced by chosen delivery and deployment model 1.3. Research two public cloud service providers and determine the specific enterprise areas of security responsibility after cloud migration for the selected cloud service provider for the solution Task 2: Build and document your cloud solution for the scenario using a Public Cloud Provider considering security, privacy and compliance enhancements. 2.1. Design the cloud architecture using the chosen Public Cloud Provider ( eg: AWS, Azure) 2.2. Implement most relevant security controls and measures to protect identified areas of responsibility. 2.3. Establish a performance measurement program to evaluate security effectiveness of implemented security controls. 2.4. Identify and Implement secure and maintain relevant logs and audit trails 2.5. Implement appropriate steps according to continuity of operation program (COOP). 2.6. Determine and Implement most relevant business continuity and data recovery plans Task 3: To incorporate sustainability into this project, customer requires a solution to achieve reduction of power consumption at their Medical and Legal Pty (end user office) and to reduce (CO2) emissions for nominated project. 3.1. Energy auditing a computer system & recommend how sustainability can be integrated into an upgrade. 3.2. Research and identify suitable technology solutions applicable to the project and gather power consumption data on ICT equipment required for an energy audit based on an agreed standard. 3.3. Present your project solution for the scenario to the class in about 10 PowerPoint slides in particular covering : Slide 1.Title Slide 2. Introduction Slide 3. Solution architecture Image Slide 4. Overview and cost Slide 5. Advantages Slide 6. Disadvantages Slide 7. CO2 Emissions Slide 8. Recommendations Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 6 of 7 Assessment Checklist 1 Unit code: ICTNWK616 Unit name: Manage security, privacy & compliance of cloud service deployment Unit code: ICTSUS601 Unit name: Integrate sustainability in ICT planning and design projects Assessment event number 01 of 02 Assessment title Project Week Activity Completed Satisfactory / Unsatisfactory Teacher Signature/ Comments Week 3-6 Task 1 1. Determine how to Manage enterprise cloud security controls for the given scenario Satisfactory Unsatisfactory 1.1. Identify the delivery models and deployment models for the cloud technology and choose the appropriate model for the given scenario. 1.2. Identify the cloud security issues faced by chosen delivery and deployment models 1.3. Research two public cloud service providers and determine the specific enterprise areas of security responsibility after cloud migration for the selected cloud service provider for the solution Week 10-17 Task 2 2. Build and document your cloud solution using a Public Cloud Provider considering security, privacy and compliance enhancements Satisfactory Unsatisfactory 2.1. Design the cloud architecture using the chosen Public Cloud Provider . 2.2. Implement most relevant security controls and measures to protect identified areas of responsibility. 2.3. Establish a performance measurement program to evaluate security effectiveness of implemented security controls. 2.4. Identify and Implement secure and maintain relevant logs and audit trails 2.5. Implement appropriate steps according to continuity of operation program (COOP). 2.6. Determine and Implement most relevant business continuity and data recovery plans Project assessment Learner document 1-Assessment-project-V04 Last revised 2 Feb 2021 Page 7 of 7 Week -13-17 Task 3 3. A solution to achieve reduction of power consumption at their Medical and Legal Pty (end user office) and to reduce (CO2) emissions for nominated project.