Quiz: Module 1 Assignment: Foundation Verification & Lab Environment Proof Assignment Overview Before we can move on to Module 2 and start using hacking tools like Wireshark and Nmap, we must verify two things: first, that you genuinely understand the core concepts of cybersecurity and networking; and second, that you have successfully built a safe, isolated virtual laboratory. In the professional world, you will often be asked to document your environment and explain technical concepts to non-technical management. This assignment simulates that process. Objective Prove your understanding of the CIA Triad and basic networking mechanics. Demonstrate the successful and safe construction of your VirtualBox lab. Practice communicating technical concepts for business/monetization purposes. Part 1: Conceptual Application (40 Points) Scenario: The Corner Coffee Shop Imagine you are consulting for a small, local coffee shop called “The Daily Grind.” They offer free Wi-Fi to customers and use a point-of-sale (POS) system to process credit cards. Over the past month, three strange things have happened: The owner’s laptop was hit by ransomware, locking all of their accounting spreadsheets until a ransom is paid. A customer complained that when they typed in www.dailygrind.com on their phone, it redirected to a weird website that looked exactly like the coffee shop’s site, but stole their email password. The manager noticed that the price of a large coffee was changed from $4.00 to $0.04 in the POS system database, and a customer was charged the wrong amount. Your Task: Write a short paragraph (100-150 words) addressing the owner. You must: Identify exactly which pillar of the CIA Triad was broken in each of the three scenarios (Scenario 1, Scenario 2, Scenario 3). Explain how the DNS system was involved in Scenario 2 using simple, non-technical language that the coffee shop owner can understand. Part 2: Practical Lab Verification (40 Points) Do not skip this section. You cannot proceed to Module 2 without a functioning lab. You will submit visual proof of your work. Task 1: The Virtual Machine Setup Take a screenshot of your VirtualBox Manager window. The screenshot must clearly show: Your Kali Linux VM. Your Metasploitable 2 VM. Note: Both machines do not need to be powered on at the exact same time for the screenshot, but their icons/names must be visible in the left-hand sidebar of VirtualBox. Task 2: Network Safety Proof As stated in Lesson 1.3, running a vulnerable machine on a standard network connection is dangerous. Take a screenshot of the Network Settings for your Metasploitable 2 VM. This screenshot must clearly show that the adapter is attached to Host-Only Adapter (not NAT). Pro-tip: In VirtualBox, go to your Metasploitable VM -> Settings -> Network -> Adapter 1. Take a screenshot of this exact window. Task 3: The Safety Net Take a screenshot proving that you have taken a “Snapshot” of your Kali Linux VM (or your Metasploitable VM) before you start doing any hacking in future modules. Pro-tip: The screenshot should show the Snaphots pane on the right side of the VirtualBox window with your saved snapshot visible. Part 3: The Consultant’s Pitch (20 Points) One of the easiest ways to make money with foundational IT knowledge (as discussed in Lesson 1.2) is by offering basic network troubleshooting to small businesses. Your Task: Write a 3-4 sentence “Elevator Pitch” that you could post on a local Facebook community group or Craigslist. Goal: Offer your services to fix slow networks, set up secure Wi-Fi, or map local devices. Requirement: You must naturally use at least two of the following terms in a way that makes you sound professional, but not confusing: IP Address, DNS, Router, DHCP, Ports. Example of bad phrasing: “I will fix your DHCP IP address on Port 80.” (Makes no sense). Example of good phrasing: “Is your internet dropping constantly? It might be a conflict with how your router is assigning IP addresses (DHCP). I can troubleshoot your network and get your devices communicating smoothly again.” Submission Checklist (Before you submit, ensure you have:) A written response identifying the CIA Triad breaches for the 3 coffee shop scenarios. A simple explanation of the DNS hack for the coffee shop owner. Screenshot 1: VirtualBox Manager showing both VMs. Screenshot 2: Metasploitable Network Settings showing “Host-Only Adapter”. Screenshot 3: Proof of a VirtualBox Snapshot. A 3-4 sentence professional pitch using two networking terms. Instructor Evaluation Rubric (How you will be graded) Conceptual Accuracy (40%): Did the student correctly map the three scenarios to Confidentiality, Integrity, and Availability? Did they accurately describe DNS spoofing/poisoning in plain English? Lab Execution (40%): Are the screenshots clear and unedited? Is Metasploitable definitively set to Host-Only? (If Metasploitable is set to NAT, the student will receive a 0 for this section and be asked to fix it before proceeding, as this is a critical safety protocol). Professional Communication (20%): Does the elevator pitch sound professional? Were the technical terms used correctly and contextually? (Note for LMS Admin: Set this up as a “File Upload” or “Text Entry” assignment where students can type their paragraphs and upload their 3 screenshots as a single PDF or Word document). - The Acinge Network
Skip to content
