lab activity 9.2.7

Lab 9.2.7

Step 1 : Build the network and configure the hosts


Step 2 : Record the baseline IP address information for computers and intergrated router


a. IP address : 192.168.1.2
   Subnet mask : 255.255.255.0
   Default gateway : 192.168.1.1
   DNS :
   DHCP :
  
b. Internal IP address : 192.168.1.3
    Subnet mask : 255.255.255.0
    Enabled.
    External (internet) IP address : 10.1.1.5
    Subnet mask : 255.0.0.0
    Default gateway IP address : 10.1.1.1
    DNS server :

c.IP address : 192.168.2.2

   Subnet mask : 255.255.255.0

   Default gateway :  192.168.2.1

   Web server 1 protocol and name : 

   Web server 2 protocol and name :

    FTP server 1 protocol and name :

    FTP server 2 protocol and name :

Step 3, 4, 5, 6, 7, 8

Masalah yang biasanya terjadi yaitu masalah routing.

Perintah - perintah yang bisa digunakan untuk menyelesaikan masalah ini :

- show ip route, untuk mengeluarkan isi dari tabel routing. Contoh nya : 

     ~ show ip route connected,

     ~ ip default network.

     ~ show ip route database

     ~ show ip route protocols

     ~ show ip route address

- Lakukan perintah ping dan telnet.

- Gunakan teknik top-down, bottom-up, dan divide and conquer.

Step 9 : Refelection

a. Divide and conquer.

b. Divide and conquer

lab activity 8.4.3

Lab 8.4.3

Step 1 : Download and install MBSA


b. MBSA versi 2.2


c. Fitur MBSA :
         -Command-line and Graphical User Interface (GUI) options
         - Scan local computer, remote computer, or groups of computer
         -Scan against Microsoft's maintained list of updates (on Microsoft.com) or local server running Software Update Services 1.0
         - Scan for common security configuration vulnerabilitie
         - Scan for missing security updates
         - View reports in MBSA Graphical User Interface or Command Line Interface
         - Compatibility with SMS 2.0 and 2003 Software Update Services Feature Pack
         - Support for single processor and multiprocessor configurations
         - Localized to English, French, German, and Japanese although MBSA 1.2.1 can scan a machine of any local


f. Antara 1.5 MB - 1.7 MB


Step 2 : Build the network and configure the hosts


c. IP address : 192.168.1.1
    Subnet mask : 255.255.255.0


Step 3 : Run MBSA on a Host


a. Options yang muncul :
    - Welcome
    - Pick a computer to scan
    - Pick multiple computer to scan
    - Pick a security report to view
    - Help
    - About
    - Microsoft Security Web Site


Step 4 : Select a computer to scan


b. 2 cara spesifik untuk men-scan komputer :
    - Scan using assign Update Services servers only
    - Scan using Microsoft Update only


Step 5 : View Security Update scan Results
a.

b.


Step 6 : View Windows Scan Results in the Security Report


a. Local Account Password Test, Automatic Update, Guest Account, File system.

b.


Step 7 : View Desktop Application Scan Results in the security report


a. Macro security


b. 4


c. Tidak.


Step 8 : Scan a server, if avaible


Step 10 : Refelction


a.  Tools :
        - Client versions of Windows, including Windows
        - Windows Server, including Windows Server 2008
        - SQL Server
        - Internet Information Server (IIS)
        - Internet Explorer
        - Microsoft Office

b. SQL server

c. Step 8.

lab activity 8.4.2

Lab 8.4.2

Part 1 : Configuring access policies

Step 1 : Build The Network and Configure The Hosts

c. Host-A :     IP address : 192.168.2.1

                         Subnet Mask : 255.255.255.0

                        Default Gateway : 192.168.2.2

   Host-B(DMZ Server) :         IP address : 192.168.189.202

                                                Subnet Mask : 255.255.255.0

                                                Default Gateway : 192.168.189.1

   External Server :      IP address : 192.168.10.1

                                    Subnet Mask : 255.255.255.0

                                     Default Gateway : 192.168.10.2

Step 2 : Log in to the user interface

c. Tipe koneksi internet nya : wireless internet connection.

d. Default router (internal) :         IP address     : 192.168.1.1

                                                            subnet mask : 255.255.255.0

f. Default router (external) :         IP address                 : 192.168.2.1

                                                             Subnet mask           : 255.255.255.0

Step 3 :  View Multi Function device Firewall settings

b. Status SPI firewall protection : enabled.

c. Internet filter yang digunakan : filter anonymous internet request, filter IDENT (port 113). 

d. Keuntungan memfilter IDENT Provide :  mencegah penyusup dari luar menyerang router melalui internet.

    

Step 4 : Set up Internet Access Restrictions based on IP Address 

d. Ya.

e. Tidak.

f. Menggunakan proxy.

Step 5 : Set up an Internet Access Policy based on Application

c. 

f. Ya.

g. Tidak.

Part 2 : Configuring a DMZ on the multi-function device


Step 1 : Set up simple DMZ


c. Karena DMZ berguna untuk menambahkan lapisan keamanan untuk LAN.


e. Ya.


f. Ya.


g. Tidak.


Step 2 : Set up a host with single port forwarding


d. Ya.


e. Tidak.

lab activity 7.3.5

Lab 7.3.5

Step 1 : Plan the security for your home network


a. 6 security best practice :
    1. Turn on WPA
    2. Change default administrator (username dan password)
    3. Change the default SSID
    4. Enable MAC address filtering
    5. Disable SSID Broadcast
    6. Enable firewalls on each computer and router


b. 6 resiko keamanan untuk setiap sistem :
    1. Interception

    2. Injection

    3. Jamming

    4. Locating Mobile Nodes

    5. Access Control

    6. Hijacking

Step 5 : Configure The Wireless Security Settings

b. SSID : ulfa

Step 8  : Reflection

a. Otomatic Configuration DHCP, karena konfigurasi nya bisa di setting sesuai kebutuhan.

b. Item yang dapat memperkuat security nya :WPA, MAC address.