Lab 6 Network Enumeration (W2024)

pdf

School

Fleming College *

*We aren’t endorsed by this school

Course

ADVANCE OP

Subject

Computer Science

Date

Feb 20, 2024

Type

pdf

Pages

4

Uploaded by ProfIron13604

Report
1 Lab 6 Network Enumeration ** Lab Report/Logbook are due within 24 hours of the START of your Lab Session ** Lab Overview Become familiar using command line utilities for network enumeration and using Common Vulnerabilities Exposure Database. Lab Requirements Weekly Lab Activities Assignment from Learning Portal Logbook Template Lab Report Template Use COMP552 Kali Image in vSphere Pre Lab Reading Network Enumeration Utilities Article https://infinitelogins.com/2021/02/20/network-enumeration-cheatsheet/ Vulnerabilities Exposure Databases https://cve.mitre.org/ https://nvd.nist.gov/vuln https://www.cvedetails.com/ Lab Objective Part 1: Understanding and Using CVEs Explain how each of the websites differ and complement each other (CVE, NVD, CVE details). How does a new vulnerability get reported to the Common Vulnerability Exposure Database ( https://cve.mitre.org/ )?
2 Lab Objective Part 2: Applied Research Assignment Your new CIO is worried about the current state of the organizations network segment. The only information provided is a general IP network segment. (192.168.XXX.0/24). No further information was provided concerning patch level, versioning, etc. Use Kali Linux image on College vSphere site. List three network enumeration command line utilities of your choice. Network Enumeration Command Line Utilities Using the listed commands, determine a) the operating system, b) services/service information, and c) ports open on the network. Provide at least one screenshot for each of a, b, and c. Based upon the open ports listing, what is the ip address of the DNS server(s), versioning number(s) of DNS? Lab Objective Part 3: Reporting of state of DNS Based upon the DNS information from above, check if any CVE information is listed in the database? In your own words, what is the condition of the DNS servers based upon CVE research? Information should include CVE listed issues and mitigation if necessary. If necessary, what is mitigation plan you can make to update and protect the DNS server(s)? Lab Submission
3 This lab report is due 24 hours from the start of this lab session. Please check D2L to verify submission deadline for your section. Lab Reports and Logbooks will receive a grade of zero for missing due date. Your lab report, logbook submissions must be written in your own words in sentence form. Absolutely no point form in lab report submission. Submit in the correct Dropbox folder for evaluation. You are required to use both the lab and logbook templates (resources section) for all submissions. Lab Report Marking Rubric Lab Report Marking Rubric Level 4 Level 3 Level 2 Level 1 Level 0 Format Format is well organized with sentences, no point form used. Not Scored Format is poorly organized, use of mixed point form and sentence form. Use of acronyms in lab report without pre-definition. Not Scored Cover Page incorrect or No organized material at all. Copy of lab slide deck /2 Initial Feedback Not Used Not Used
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
4 Activities and Discussion Discussion covers all objectives and discussions in lab with in-text citation, if required. Report is written in author's own words. Discussion covers mostly all objectives and discussions in lab with in-text citation, if required. Report is written in author's own words. Discussion covers some obejectives and discussions in lab with missing in text citation. Report is partially written in author's own words. Discussion covers very little objectives and discussions in lab with missing in text citation. Report is partially written in authors own words. No discussion, no in text citation. Report is not written in authors own words. Report is written as questionand- answer format. /4 Initial Feedback Conclusion Conclusion is complete with ideas drawn from discussion and activities Not Scored Conclusion is somewhat complete with missing ideas drawn from discussion and activities. Not Scored Conclusion is incomplete. /2 Initial Feedback Not Used Not Used References References correctly used. Not Scored References used with numerous syntax errors Not Scored No References used. /2 Initial Feedback Not Used Not Used Total /10 Final Feedback