ICTNWK618 — Design and implement a security system

1 Assess network infrastructure threats

• 1.1Identify major industry standard network attacks and malware
• 1.2Evaluate mitigation methods for required network attacks and malware according to organisational network architecture
• 1.3Determine and document options for defending network architecture

2 Secure edge devices (routers)

• 2.1Secure required network routers according to technical requirements
• 2.2Secure required administration access to routers using the router operating system (OS)
• 2.3Secure required router OS and its configuration file(s)

3 Implement authentication, authorisation and accounting (AAA) and secure access control system (ACS)

• 3.1Determine and implement required authentication and authorisation
• 3.2Configure router and use AAA according to technical requirements
• 3.3Analyse and compare Terminal Access Controller Access-Control System Plus (TACACS+) and Remote Authentication Dial In User Service (RADIUS) AAA protocols for securing the network

4 Mitigate threats to routers and networks using access control lists (ACLs)

• 4.1Assess and document access control list functionality and requirements
• 4.2Configure and verify IP ACLs to mitigate threats and prevent internet protocol (IP) address spoofing
• 4.3Test IP ACLs functionality against organisational and technical requirements

5 Implement secure network management and reporting

• 5.1Configure secure shell (SSH) on routers and enable secure management
• 5.2Configure routers to send log messages to a log server with tools
• 5.3Document layer two attack prevention methods and confirm basic switch security features
• 5.4Configure layer two attack prevention switch

6 Implement intrusion detection and prevention system (IDPS) feature set in the router OS using secure device manager (SDM)

• 6.1Evaluate and compare network based and host based IDPS and identify malicious activity, log information, attempt to stop activity and document reported activity
• 6.2Determine IDPS technologies, attack responses and monitoring options
• 6.3Configure router OS IDPS operations according to organisational and technical requirements
• 6.4Finalise reports and documentation and submit to required personnel

What does an assessment tool for ICTNWK618 need to cover?

To satisfy the Principles of Assessment and Rules of Evidence, an assessment for ICTNWK618 needs to address all 42 unit components: 6 elements with 20 performance criteria, 1 performance evidence requirements, 12 knowledge evidence requirements, and the foundation skills. A coverage matrix mapping each question and task to these components is what an auditor looks for.

How does Auditori generate an assessment tool for ICTNWK618?

Auditori pulls the current release of ICTNWK618 from training.gov.au and generates a complete package: candidate assessment, assessor guide with model answers and observation criteria, and a coverage matrix mapping every component. A suitably qualified person then reviews and approves the draft in a built-in workflow — consistent with ASQA's guidance on AI use in VET — before export as branded PDF and editable Word.

Is the first assessment tool really free?

Yes. Every new account includes one free credit — enough to generate the complete assessment tool for ICTNWK618 — with no card and no subscription required. After that it's pay-as-you-go per unit.

Can I check my existing ICTNWK618 assessment instead of generating a new one?

Yes — upload your existing assessment or learner guide and Auditori maps it against every element, performance criterion, PE and KE of ICTNWK618, showing exactly what's covered and what's missing. Mapping costs a quarter of a credit.