WSC2013 MS39 OMF IT Network Systems Administration

Skill Number 39 Skill IT Network Systems Administration Competition Day

Competitor Name Member

Sub Criterion lnxrtr1 Sub Criterion ID A1

Marking Scheme Lock 02-07-2013 12:01:52 Mark Entry Lock

AspectID

MaxMark Aspect of Sub Criterion - Description

Requirement orNominal Size

Result or ActualValue

MarkAwarded

O1 0.10 Hostname

O2 0.10 IP Address and subnet mask no. 1



O5 0.10 Routing - IP forwarding

O6 0.10 Routing - default gateway

O7 0.50 iptables - access from External to Guest or to Internal is prohibited

O8 1.00 iptables - all HTTP traffic is forwarded to local proxy

O9 0.25 iptables - ping access from Guest VLAN to any network isprohibitedO10 0.25 Proxy web site access

O11 0.50 Proxy web site restrictions

O12 0.50 Transparent proxy

O13 0.25 DHCP - Check address assignment for Guest VLAN

O14 0.25 DHCP - Check address assignment for Internal VLAN

O15 0.25 DHCP - DNS assignment

4.35 Maximum Mark for Sub Criterion Mark Awarded

Objective Marking

WorldSkills Leipzig 2013

Copyright WorldSkills International 2013. All rights reservedCIS software provided courtesy of WorldSkills International www.worldskills.org01-08-2013 01:19:59Page 1 / 1



Sub Criterion lnxsrv1 Sub Criterion ID A2


AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.10 IP Address and subnet mask

O3 0.25 Apache2 - installed and running

O4 0.25 Apache2 - HTTPS site1

O5 0.25 Apache2 - HTTPS site2

O6 0.25 Apache2 - HTTPS Certificate site1

O7 0.25 Apache2 - HTTPS Certificate site2

O8 0.50 Apache2 - Authentication

O9 0.25 Apache 2 - Expose minimum info

O10 0.50 Apache 2 - HTTPS redirection

O11 0.10 Apache 2 - Current date and time and website names

O12 0.25 DNS service running

O13 0.25 DNS on lnxsrv1 for site1

O14 0.25 DNS on lnxsrv1 for site2

O15 0.80 DNS on lnxclt2 gets private IPs

O16 0.25 DNS serving only its own domain names for external clients

O17 0.25 FTP - Login

O18 0.40 FTP - User jail

O19 0.25 FTP - vsftpd


Objective Marking





Sub Criterion lnxsrv2 Sub Criterion ID A3


AspectID




MarkAwarded

O1 0.25 Hostname

O2 0.25 IP Address and subnetmask

O3 0.25 Additional Disk for RAID

O4 0.75 Partition Setup - RAID1

O5 0.25 Samba - running

O6 0.10 Samba - share-name "internal"

O7 0.10 Samba - share-path "internal"

O8 0.20 Samba - Access restrictions share "internal"

O9 0.20 Samba - "internal" is hidden

O10 0.10 Samba - share-name "public"

O11 0.10 Samba - share-path "public"

O12 0.20 Samba - access restrictions share "public"

O13 0.50 Cacti - running

O14 1.00 Cacti - content

O15 0.25 Cacti - admin user

O16 0.25 Backup - scheduled

O17 0.40 Backup - filename

O18 0.25 Backup - content


Objective Marking





Sub Criterion swi1 Sub Criterion ID A4


AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.25 SNMP

O3 0.10 Correct port is used for rtr1

O4 0.10 Port to rtr1 has the correct switchport configuration

O5 0.10 Correct port is used for lnxrtr1

O6 0.10 Port to lnxrtr1 has the correct switchport configuration

O7 0.10 Correct port is used for lnxsrv1

O8 0.10 Port to lnxsrv1 has the correct switchport configuration

O9 0.10 Correct port is used for lnxsrv2

O10 0.10 Port to lnxsrv2 has the correct switchport configuration

O11 0.10 Correct port is used for lnxclt2

O12 0.10 Port to lnxclt2 has the correct switchport configuration


Objective Marking





Sub Criterion lnxrootrecovery Sub Criterion ID A5


AspectID




MarkAwarded

O1 1.00 Root recovery


Objective Marking





Sub Criterion lnxclt1 Sub Criterion ID A6


AspectID




MarkAwarded

O1 0.10 Hostname


O3 1.00 OpenVPN - Connection

O4 0.25 OpenVPN - Authentication

O5 0.50 OpenVPN - Communication with lnxsrv2

O6 0.50 OpenVPN - Communication with others prohibited


Objective Marking





Sub Criterion lnxclt2 Sub Criterion ID A7


AspectID




MarkAwarded

O1 0.25 SSH - Connection

O2 0.75 SSH - Login certificate

O3 0.25 SSH - User

O4 0.10 Hostname



Objective Marking





Sub Criterion hostsrv1 Sub Criterion ID B1


AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.10 IP address

O3 0.10 Active Directory - DNS domain name

O4 1.00 Active Directory - Check domain user creation

O5 0.25 Active Directory - Check group creation

O6 0.50 Active Directory - Forest Trust

O7 0.50 DNS - Host and SRV records

O8 0.25 DNS - Forward Zone

O9 0.25 DNS - Reverse Zone

O10 0.25 DNS - Secondary Zone

O11 0.15 Print Server - Name

O12 0.25 Print Server -Published

O13 0.40 DFS - Configuration

O14 0.20 DFS - Replication

O15 0.35 Login banner - from Client1

O16 1.00 Fine Grained Password Policy - from Client1

O17 0.20 Print - IT Group Management - from Client1

O18 0.20 Printer - Print Restrictions - from Client1

O19 0.30 IT Group/Local Admin - from Client1

O20 0.40 Visitor Group Restrictions - from Client1

O21 0.40 No access to control panel display except IT group - from Client1

Objective Marking







AspectID




MarkAwarded

O22 0.70 Home Folder - from Client1

O23 0.50 Department Share Permissions - from Client1

O24 0.50 Storage Space Restrictions - from Client1

O25 0.50 File Restrictions - from Client1

O26 0.20 DNS - ping www.leipzig.wsc - from Client1

O27 0.70 FireFox - from Notebook1

O28 0.70 Site Login - from Notebook1


Objective Marking







AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.10 IP Address

O3 0.10 AD - DC

O4 0.30 RAID

O5 0.30 RRAS - VPN Server

O6 0.90 VPN Access - from Notebook1


Objective Marking







AspectID




MarkAwarded

O1 0.25 Hostname

O2 0.25 IP Address

O3 0.25 Domain Membership

O4 0.50 BranchCache - Check branchcache service


Objective Marking





Sub Criterion cloudsrv1 Sub Criterion ID B4


AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.10 IP Address

O3 0.30 Remote Desktop - Gateway

O4 0.30 Remote Desktop - Remote Web Access

O5 0.30 Remote Desktop - Remote App

O6 0.20 DNS - RDP resolution

O7 0.25 WDS - Deploy Windows 7

O8 0.30 Remote App Shortcut Available - from Client1

O9 0.30 Remote App opens Wordpad - from Client1

O10 1.00 Remote App SSO - from Client1

O11 0.50 Remote Desktop Web Access - from Client1

O12 1.00 WDS - Deploy Windows 7 - from Notebook1


Objective Marking





Sub Criterion client1 Sub Criterion ID B5


AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.10 IP address


O4 0.40 Branchcache distributed cache mode

O5 0.70 IIS - Check HostSRV3 website - from Client1


Objective Marking





Sub Criterion notebook1 Sub Criterion ID B6


AspectID




MarkAwarded

O1 0.10 Hostname

O2 0.25 DHCP Client - VLAN20

O3 0.25 DHCP Client - VLAN30


O5 0.50 Bitlocker


Objective Marking





Sub Criterion printer1 Sub Criterion ID B7


AspectID




MarkAwarded

O1 0.25 IP Address


Objective Marking





Sub Criterion lnxsrv1 Sub Criterion ID C1


AspectID




MarkAwarded

O1 0.30 Basic configuration (FQDN, IP address)

O2 0.90 FreeRadius - Running and users exist


Objective Marking





Sub Criterion hqswi1 Sub Criterion ID C2


AspectID




MarkAwarded

O1 0.60 Basic configuration (hostname, IP address) and cabling

O2 0.50 Etherchannel

O3 0.50 STP

O4 0.35 QoS

O5 0.10 Telnet

O6 0.60 Radius authentication for management

O7 0.20 Local authentication failover

O8 0.90 TFTP server - backup of hqswi1 configuration exists in /backup


Objective Marking





Sub Criterion hqswi2 Sub Criterion ID C3


AspectID




MarkAwarded


O2 0.40 STP - portfast

O3 0.20 STP - BPDU guard

O4 0.50 VTP is working with the right domain and password

O5 0.35 QoS

O6 0.20 All unused ports are shutdown


Objective Marking





Sub Criterion hvph1 Sub Criterion ID C4


AspectID




MarkAwarded

O1 0.10 Phone IP address

O2 1.00 IP phone registred to CME

O3 0.50 VLANs


Objective Marking





Sub Criterion hqrtr1 Sub Criterion ID C5


AspectID




MarkAwarded


O2 0.60 VLANs

O3 0.70 GRE tunnel is working

O4 0.30 Working GRE tunnel uses the right password

O5 0.10 Working GRE tunnel uses right IP address

O6 0.30 OSPF - Routing

O7 0.20 OSPF Routing information goes through the tunnel

O8 0.60 Paging to all phones

O9 0.40 Paging using speed dial

O10 0.50 Intercom

O11 0.35 QoS

O12 0.50 DHCP -Scopes

O13 0.50 NAT for internet access

O14 0.50 NTP synchronization


Objective Marking





Sub Criterion rsrtr1 Sub Criterion ID C6


AspectID




MarkAwarded

O1 0.30 Basic configuration (hostname, IP address and Cabling)

O2 0.60 VLANs

O3 0.30 OSPF - Routing

O4 0.20 OSPF Routing information goes through the tunnel

O5 0.35 QoS - Check values

O6 0.45 DHCP - Scopes

O7 0.30 DHCP - relay


O9 0.50 ACL - prohibit access between guest and internal networks


Objective Marking





Sub Criterion rswap1 Sub Criterion ID C7


AspectID




MarkAwarded

O1 0.20 Basic configuration (hostname, IP address)

O2 0.20 VLAN 20

O3 0.35 SSID for internal and guest WLAN

O4 1.00 WPA enterprise authentication with WPA2 / AES encyrption

O5 0.25 Guest user WLAN access

O6 0.50 QoS


Objective Marking





Sub Criterion winclt1 Sub Criterion ID C8


AspectID




MarkAwarded

O1 0.65 On HQ-site: softphone is registered and is able to place a call to the#100O2 0.20 On RS-site: softphone is registered and is able to place a call to the#100


Objective Marking





Sub Criterion winsrv1 Sub Criterion ID D1


AspectID




MarkAwarded

O1 0.15 Hostname of server and IP address

O2 0.15 Active Directory - Netbios and DNS Domain Name

O3 0.15 DNS

O4 0.30 DHCP - DHCP Range

O5 0.15 NAP - NPS is installed on server

O6 0.15 CA -installed

O7 0.15 NTP Server running


Objective Marking





Sub Criterion lnxsrv1 Sub Criterion ID D2


AspectID




MarkAwarded

O1 0.15 Hostname of server and IP address

O2 0.30 Confirm Syslog events to lnxsrv1 from hqsec1

O3 0.30 Confirm Syslog events to lnxsrv1 from dcsec1

O4 0.15 Confirm Syslog events to lnxsrv1 from dcswi1

O5 0.30 Install and Configure a Syslog Server


Objective Marking





Sub Criterion hqrtr1 Sub Criterion ID D3


AspectID




MarkAwarded

O1 0.15 IP addresses are correct

O2 0.35 NAT-PT - Interfaces

O3 0.15 Confirm NTP client configuration

O4 0.85 NAT-PT - Address mapping


Objective Marking





Sub Criterion hqswi1 Sub Criterion ID D4


AspectID




MarkAwarded

O1 0.10 Port 1 is used for hqsec1

O2 0.10 Port 2 is used for hqrtr1

O3 0.10 Port 3 is used for winsrv1

O4 0.20 All ports are in VLAN 100

O5 0.15 Port security - violation mode on port F0/4

O6 0.15 Port security - recovery on port f0/4

O7 0.15 Configure port security on F0/24

O8 0.15 Configure DHCP Snooping (Server is on F0/3)

O9 0.15 Restrict remote access to SSH

O10 0.15 Configure portfast on access ports


O12 0.15 Ping 192.168.20.120

O13 1.50 802.1x - port status - from f0/5-f0/22

O14 0.15 802.1x - AAA provider


Objective Marking





Sub Criterion hqsec1 Sub Criterion ID D5


AspectID




MarkAwarded


O2 1.20 IPsec tunnel - Connectivity


O4 0.30 AnyConnect VPN - Address range

O5 0.30 AnyConnect VPN - Software removal

O6 0.15 Remote access via SSH

O7 0.30 Configure firewall - NO permit ip any any



Objective Marking





Sub Criterion dcsec1 Sub Criterion ID D6


AspectID




MarkAwarded


O2 1.35 IPsec tunnel - Connectivity


O4 0.30 Security levels

O5 0.30 Configure firewall - NO permit ip any any

O6 0.15 PAT HTTPS

O7 0.45 PAT for SMTPS, POP3S, IMAPS


Objective Marking





Sub Criterion dcswi1 Sub Criterion ID D7


AspectID




MarkAwarded

O1 0.20 Port 1 is used for dcsec1

O2 0.15 All other ports should be configured for clients

O3 0.15 Remote access via SSH

O4 0.15 Allow ping between dcswi1 and winsrv1. Ping 172.16.128.10

O5 0.15 Configure portfast on all access ports


Objective Marking





Sub Criterion winclt1 Sub Criterion ID D8


AspectID




MarkAwarded

O1 0.15 Hostname

O2 0.15 Shortcut to Webmail

O3 0.50 Check user Peter for smtps + pops

O4 0.50 Check user Mary for smtps + imaps

O5 1.00 AnyConnect VPN - Connectivity & Access(on winclt1, connect AnyConnect VPN client,lnxsrv1 / 192.168.10.2,ping to hqrtr1 / 172.16.128.2)


Objective Marking







AspectID




MarkAwarded

O1 0.15 Hostname

O2 0.15 Domain

O3 0.75 NAP - Restriction

O4 0.15 DHCP - Check address assignement

O5 0.30 802.1x is - Configuration

O6 0.30 802.1x - Server Certificate

O7 0.15 Active Directory - Logon


Objective Marking







AspectID




MarkAwarded

O1 0.60 Mail - HTTPS access

O2 0.15 Hostname and IP address


Objective Marking





Sub Criterion lnxclt1 Sub Criterion ID D11


AspectID




MarkAwarded

O1 0.15 Hostname and IP address

O2 1.25 NAT-PT - Connectivity

O3 0.30 Shortcut to NETLOGON share


Objective Marking



Skill Number 39 Skill IT Network Systems Administration Competition Day 1


Sub Criterion Troubleshooting Day1 Sub Criterion ID E1

Marking Scheme Lock 02-07-2013 12:01:52 Mark Entry Lock 06-07-2013 19:09:13

AspectID




MarkAwarded

O1 0.02 reaches 5%

O2 0.03 reaches 10%

O3 0.05 reaches 15%

O4 0.07 reaches 20%

O5 0.08 reaches 25%

O6 0.10 reaches 30%

O7 0.12 reaches 35%

O8 0.13 reaches 40%

O9 0.15 reaches 45%

O10 0.17 reaches 50%










O20 0.33 reaches 100%


Objective Marking







AspectID




MarkAwarded

O1 0.02 reaches 5%

O2 0.03 reaches 10%

O3 0.05 reaches 15%

O4 0.07 reaches 20%

O5 0.08 reaches 25%

O6 0.10 reaches 30%

O7 0.12 reaches 35%

O8 0.13 reaches 40%

O9 0.15 reaches 45%











O20 0.33 reaches 100%


Objective Marking



WSC2013 MS39 OMF IT Network Systems Administration

Documents

Transcript of WSC2013 MS39 OMF IT Network Systems Administration