MODULE 10: Final Practical Project (Self-Assessment Only)
Lesson 1: Enterprise Security Audit (Self-Practice)
Students perform a small, guided security audit similar to what real cybersecurity teams do.
This helps them think like a security analyst.
Objective
Analyze an organization’s IT environment and identify:
- Security weaknesses
- Misconfigurations
- Missing policies
- High-risk exposures
Audit Sections
- Password & Authentication Review
Check:
- Weak or reused passwords
- Missing MFA
- Shared or default admin accounts
- Poor password policy
- Network Security Review
Check:
- Firewall rules
- Open/unused ports
- VLAN segmentation
- Public IP exposure
- Network monitoring
- Endpoint Security Review
Check:
- EDR/antivirus status
- Patch levels
- USB restrictions
- Secure baselines
- Misuse of admin privileges
- Cloud Security Review
Check:
- Overly open IAM roles
- Missing MFA for cloud admins
- Public-facing VMs
- Exposed storage buckets
- Weak NSG/security group rules
- Application & Web Security Review
Check:
- HTTPS enforcement
- Input validation
- Outdated libraries
- SQLi/XSS risks
- Missing WAF
- Policy Review
Check:
- Password policy
- Acceptable Use Policy
- BYOD policy
- Incident response plan
- Backup strategy
Deliverable (Self-Check)
Students create a simple, short report:
- Issues found
- Risk rating (Low / Medium / High)
- Suggested fixes
- Optional screenshots
This simulates real-world security consulting work but just for practice.
Lesson 2: Simulated Cyber Attack Analysis (Self-Practice)
Students analyze a sample cyber-attack like a SOC analyst.
Scenario Example
A detection alert shows:
Multiple failed logins → successful login from foreign IP.
User: johndoe
Time: 02:14 AM
Activity: Large data download.
Task Requirements
- Identify the attack
Likely account compromise.
- Contain the attack (theoretical)
- Disable the account
- Force password reset
- Block suspicious IP
- Notify IT
- Analyze logs
Look at:
- Login history
- File download logs
- Device information
- Time of activity
- Recommend prevention
Examples:
- Enforce MFA
- Conditional access
- Block risky locations
- Improve monitoring
Deliverable (Self-Check)
Write a short “Incident Summary” including:
- What happened
- How it was detected
- What actions were taken
- What could prevent it
Lesson 3: Cybersecurity Tools Mini-Lab (Optional Practice)
These are optional activities to help students interact with common cybersecurity tools (conceptually or in demo form).
Tools Covered
- SIEM View
- Search logs
- Look for failed logins
- Identify suspicious activity
- EDR Console
- Review alerts
- Quarantine items
- Kill malicious processes
- Vulnerability Scanner
Tools like:
- Nessus
- OpenVAS
Students learn how vulnerabilities appear and what severity ratings mean.
- Network Tools (Basic)
Try:
- ping
- tracert
- ipconfig / ifconfig
- nmap (safe scans only)
Purpose
Not to make students experts
but to teach them how these tools work in real SOC environments.
Lesson 4: Self-Assessment Reflection
Instead of an exam, students complete a simple reflection:
Questions to Reflect On
- Which modules did I understand the best?
- What topics do I need to review again?
- Where am I strong: network, cloud, endpoint, or incident response?
- Which career path interests me now (SOC, cloud, pentesting, etc.)?
- What skills do I want to learn next?
This helps students understand their growth and identify next steps.
Module 10 Summary
In this module, students practice:
- A full enterprise security audit
- A simulated cyber-attack analysis
- Hands-on tool concepts
- A personal cybersecurity self-evaluation
There is NO certification this module simply helps students apply what they learned and see their real progress.