MendozaGuerrero_L_2.5.2.7
docx
keyboard_arrow_up
School
Greenville Technical College *
*We aren’t endorsed by this school
Course
110
Subject
Industrial Engineering
Date
Feb 20, 2024
Type
docx
Pages
24
Uploaded by HighnessFlowerBadger33
GTC IST-110 PT Lab: Data Integrity Checks
Addressing Table
Device
Private IP
Address
Public IP Address
Subnet Mask
Site
FTP / web server
10.44.1.254
209.165.201.3
http: //www.cisco.corp
255.255.255.0
Metropolis Bank HQ
Backup File Server
N / A
209.165.201.10
https: //www.cisco2.corp
255255255248
Internet
Mike
10.44.2.101
N / A
255.255.255.0
Healthcare at Home
Sandra
10.44.1.2
N / A
255.255.255.0
Metropolis Bank HQ
Bob
10.44.1.3
N / A
255.255.255.0
Metropolis Bank HQ
Objectives
Part 1: Download the client files on Mike's PC
Part 2: Download the client files from the backup file server on Mike PC
Part 3: Check the integrity of the client files with hashing
Part 4: Check the integrity of important files with HMAC
Background / Scenario
In this activity, you will verify the integrity of multiple files using hashes to ensure files have not been
tampered with. If any files are suspected of being tampered with, they are to be sent to Sally’s PC for further analysis. The IP addressing, network configuration, and service configurations are already complete. You will use the client devices in the differing geographic regions to verify and transfer any suspect files.
Screenshots (Output)
For screenshots (snips) make sure to include enough to determine proper source and/or target devices. This could be via including the name of the PC/Device, the hostname of the networking device (Router or switch) or ipconfig output
Refer to the PDF in Blackboard Menu: Labs > “Screenshot Capture for Labs and Assignments” > “Labs – Screenshots” > IST_110_Lab_PT_Screen_Outputs.pdf GTC - CPT Dept
Page 1
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
Part 1:
Download the Client Files to Mike’s PC
Step 1:
Access the FTP server from Mike’s PC.
a.
Click the Gotham Healthcare Branch site and then click the PC Mike.
b.
Click the Desktop tab and then click Web Browser.
c.
Enter the URL http://www.cisco.corp
and click Go.
Screenshot (below): Cisco.corp home page
d.
Click the link to download the most current files. What is shown???
Screenshot (below): Cisco.corp download page
GTC - CPT Dept
Page 2
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
e.
What protocol was used to access this webpage on the backup file server? (spell out acronyms)
Hypertext Transfer Protocol Step 2:
The file server has been hacked, notify Sally.
a.
Within the Gotham Healthcare Branch site, click the PC Mike.
b.
Click the Desktop tab and then click Email.
c.
Create an email and send it to Sally@cisco.corp
and tell her about the File Server.
Screenshot (below): Created email (show SENT message) GTC - CPT Dept
Page 3
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
Step 3:
Verify Sally received notification of hack
a.
Within the Metropolis Bank HQ, click the PC Sally.
b.
Click the Desktop tab and then click Email.
c.
Click Receive then Click on the received email (click once do not double click)
d.
Verify Sally received the notification email form Mike.
Screenshot (below): Received email (with full body text)
GTC - CPT Dept
Page 4
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
Part 2:
Download the Client Files from the Backup File Server to Mike’s PC
Step 1:
Access the offsite FTP server from Mike’s PC.
a.
Within the Gotham Healthcare Branch site, click the PC Mike.
b.
Click the Desktop tab and then click Web Browser.
c.
Enter the URL https://www.cisco2.corp
and click Go.
Screenshot (below): cisco2.corp home page
GTC - CPT Dept
Page 5
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
d.
Click the link to view the most recent files and their hashes.
Screenshot (below): “most recent files and their hashes” web page
GTC - CPT Dept
Page 6
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
e.
What protocol was used to access this webpage on the backup file server?
(spell out acronyms)
Hypertext Transfer Protocol Secure
Step 2:
Download the client files to Mike’s PC.
a.
Within the Gotham Healthcare Branch site, click the PC Mike.
b.
Click the Desktop tab and then click Command Prompt.
c.
Connect to the Backup File server by entering ftp www.cisco2.corp
in the command prompt.
d.
Enter the username of mike
and a password = cisco123
Screenshot (below): Completed FPT login (username and password entry completed at >ftp command prompt
GTC - CPT Dept
Page 7
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
e.
At the ftp> prompt, enter the command dir
to view the current files stored on the remote FTP server.
Screenshot (below): FTP Command and output
GTC - CPT Dept
Page 8
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
f.
Download the six client files to Mike’s PC by entering the command get [FILENAME].txt
(using the proper filename for each)
1) NEclients.txt
2) NWclients.txt
3) Nclients.txt
4) SEclients.txt
5) SWclients.txt
6) Sclients.txt
GTC - CPT Dept
Page 9
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
g.
After downloading all the files, enter the command quit at the ftp> prompt.
h.
At the PC> prompt, enter the command dir and verify the client files are now on Mike’s PC.
Screenshot (below): Output of all client files on Mike’s PC
GTC - CPT Dept
Page 10
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
Part 3:
Verify the Integrity of the Client Files using Hashing
Step 1:
Check the hashes on the client files on Mike’s PC
a.
Within the Gotham Healthcare Branch site, click the PC Mike.
b.
Click the Desktop tab and then click Text Editor.
c.
In the Text Editor window, click File > Open.
d.
Click on the first document NEclients.txt
and click OK.
Screenshot (below): text contents of NEclients.txt on Mike’s PC
e.
Copy the entire text document contents.
f.
Open a web browser on your personal computer
and browse to the website:
https://www.tools4noobs.com/online_tools/hash/
GTC - CPT Dept
Page 11
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
g.
Click the whitespace and paste in the text document contents. Make sure the algorithm is set to md2.
h.
Click Hash this!
i.
To make sure a file has not been tampered with, you will compare the resulting hash with the
filename/hash information you found in Part 2 Step 1.
j.
Repeat the steps (above) for each client file and compare the generated hash with the original hash
shown in Part 2 Step 1.
GTC - CPT Dept
Page 12
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
Screenshot (below): Output & Result (same as example provided) for NWclients.txt
Screenshot (below): Output & Result (same as example provided) for SWclients.txt
GTC - CPT Dept
Page 13
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
Screenshot (below): Output & Result (same as example provided) for SEclients.txt
GTC - CPT Dept
Page 14
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
Screenshot (below): Output & Result (same as example provided) for Sclients.txt
GTC - CPT Dept
Page 15
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
Screenshot (below): Output & Result (same as example provided) for Nclients.txt
GTC - CPT Dept
Page 16
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
k.
Which file has been tampered with and has an incorrect hash?
SEclients.txt
Step 2:
Download the suspected file to Sally’s PC. a.
Click the Metropolis Bank HQ site, and then click the PC Sally.
b.
Click the Desktop tab and then click Command Prompt.
c.
Connect to the Backup File server by entering ftp www.cisco2.corp
in the command prompt.
d.
Enter the username of sally
and a password = cisco123
Screenshot (below): Completed FPT login (username and password entry completed at >ftp command prompt
GTC - CPT Dept
Page 17
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
e.
At the ftp> prompt, enter the command dir
to view the current files stored on the remote FTP server.
f.
Download the file that was found to have been tampered with in Part 3 Step 1.
Screenshot (below): Output of successful downloaded file from ftp
GTC - CPT Dept
Page 18
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
g.
At the ftp> prompt, enter the command quit.
h.
At the PC> prompt, enter the command dir
and verify the tampered client file is now on Sally’s PC for
analysis later.
Part 4:
Verify the Integrity of Critical Files using HMAC
Step 1:
Compute the HMAC of a critical file.
a.
Within the Metropolis Bank HQ site, click the PC Bob.
b.
Click the Desktop tab and then click Command Prompt.
c.
At the PC> prompt, enter the command dir
and verify the critical file named income.txt
is on Bob’s PC.
GTC - CPT Dept
Page 19
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
Screenshot (below): dir Command and output
d.
Within the Desktop tab, click Text Editor.
e.
In the Text Editor window, click File > Open.
f.
Click the document income.txt
and click OK.
g.
Copy the entire text document contents.
h.
Open a web browser on your personal computer and browse to the website http://www.freeformatter.com/hmac-generator.html
GTC - CPT Dept
Page 20
of 24 IST 110 Lab
GTC IST-110 PT Lab: Data Integrity Checks
i.
Click the whitespace and paste in the text document contents. 1)
Enter the secret key = cisco123
2)
Make sure the algorithm is set = SHA1
3)
Click Compute HMAC.
4)
What is the computed HMAC for the contents of the file?
Screenshot (below): computed HMAC
GTC - CPT Dept
Page 21
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
5)
How is using HMAC more secure than general hashing? (be descriptive; 3-4 sentences minimally)
To produce a specific hash, you need both the original message and a secret message. This key-based method adds an extra layer of protection, making sure that the message is real and intact. Unlike simple hash functions, HMAC is also not vulnerable to length extension attacks, which makes it safer.
Step 2:
Verify the computed HMAC.
a.
Within the Metropolis Bank HQ site, click the PC Bob.
b.
Click the Desktop tab and then click Web Browser.
c.
Enter the URL https://www.cisco2.corp
and click Go.
Screenshot (below): cisco2.corp home page
GTC - CPT Dept
Page 22
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
d.
Click the link to view the most recent files and their hashes.
Screenshot (below): “most recent files and their hashes” web page
GTC - CPT Dept
Page 23
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
GTC IST-110 PT Lab: Data Integrity Checks
e.
Does the HMAC hash for the income.txt file match? (Yes/No)
Yes
GTC - CPT Dept
Page 24
of 24 IST 110 Lab
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help