Final 30% Changes

Module A
Linux Environment
 Module A – 30% Changes
• 1 - public.worldskills.org server serves public.worldskills.org and www.worldskills.org
websites only HTTP protocol. Create a HTTPS reverse proxy with nginx for these
websites on fw.worldskills.org.
• 2 - Use proftpd instead of vsfptd.
• 7 - Setup Icinga2 monitoring software on private.skills39.net and monitor
fw.skills39.net using ICMP.
• 10 - Icinga2 - Monitoring OpenVPN site-to-site connection with Icinga2 using
ICMP.
• 11 - Icinga2 - Monitoring the status of the website intranet.skill39.net.
 Module A – 30% Changes
• 16 - Setup secondary DNS server on srvpv02.fast-provider.net for zone
worldskills.org.
• 17 - Configure a security policy for the rsync service, only allow clients from
the skill39.net network to synchronize. For other network clients trying to
connect, unauthorized log should be generated.
• 19 - Set up SSH-Server and add a user. Restrict the user to his/her own
directory. The user will have administrative rights to the directory. The user
should not be allowed to use the “ping” command.
 Module A – 30% Changes
• 23 – Provide Fully Qualified Domain Name for every server and client in the
table.
• 28 - Install Fail2Ban on public.worldskills.org.
• 35 - Ensure Apache2 doesn´t expose any protocol header and footer
information (e.g. version, OS…).
 Module B
Windows Environment
 Module B – 30% Changes
• Pre-installation of most VM’s including system names, IP’s, and domain
joined.
• Pre-installation of Pubclient and HyperV1 machines (previously an install
from scratch)
• Reduction of GPO requirements
• Removal of App-triggered VPN
• Modify VPN requirement to always on VPN to allow access to all resources
 Module B – 30% Changes
• 2 - Modification of HyperV Cluster:
• Provide Failover clustering with live migration capability.
• 6 - DHCP configuration Modifications:
• Addition of DHCP Scope protection to restore backup states if modified.
• 7 - Use Bitlocker to encrypt folder on drive of REMCLIENT machine.
• 8 - Set specific Disk Quota’s for user’s home folders.
 Module B – 30% Changes
• 9 - Set specific file type restrictions for user’s home folders.
• 11 - Group Policy Modifications:
• Provide a login banner for all users.
• 14 - Nest all Project VM’s inside large 2016 Server (hosted on ESX) to allow for
single Windows VM to host all VM’s in project. Access to project VM’s would be
accomplished through hyper-V, and Remote Desktop. Access to Host VM would be
accomplished via VMWare Workstation.
• 18 - Use of DFS to have folder shares from different servers to appear as part of
single share.
Module C
Cisco Environment
 Module C – 30% Changes
• N°1 – Title change Module C – Commissioning of data and voice networks
• N°2 – Diagram change - WSC2019_39_ ModC_Topology_change_4.pdf
• N°3 – Preconfigure basic IP addressing, VLANs and services
• N°4 – Pre-configured VLANs
• N°5 – Remove DTP functional requirements
• N°6 – Move LAG to L3 switches
• N°7 – Remove L2 features from functional requirements
• N°8 – Add FHRP on L3 switches
 Module C – 30% Changes
• N°9 – Change functional requirements for public internet
• N°10 – Add security on the internet edge
• N°11 – Remove dynamic routing protocol functional
• N°12 – Add remote access VPN
• N°13 – Add FHRP at the internet edge (Tyumen)
• N°14 – Add Services Integration section
• N°15 – Change DHCP implementation requirement
• N°16 – Add network devices to the real SNMP monitoring
 Module C – 30% Changes
• N°17 – Add network configuration backup (Exclude RTK and ASA)
• N°18 – Explicitly deny authentication on console lines
• N°19 – Add domain-wide authentication on network devices
• N°23 – Adjust functional requirements for UC section
• N°27 – Add self-assessment questionnaire
• N°28 – Add remote access VPN to the Enterprise routing domain implementation
• N°29 – Add Services Implementation to the self-assessment questionnaire
• N°31 – Add SNMP to the Services Implementation section
• N°34 – Add remote Softphone to the UC section