2024 Cyber Security Competition-Module A Task
1. Project and task description:
Assume that you are a network security engineer of an enterprise. For the enterprise's server system, ensure the normal operation of each service according to the task requirements, and through comprehensive use Login and password strategies, traffic integrity protection strategies, event monitoring strategies, firewall strategies and other security strategies are used to improve the network security defense capabilities of the server system.
2. Instructions:
1. All screenshots must have a screenshot interface, clear fonts, and be pasted in the location required by the corresponding question;
2. File naming and saving: Network security module A-XX (XX is the station number), saved in PDF format;
3. Save the file to a USB flash drive for submission.
3. Server environment description
AServer07 (Windows) system: username administrator password 123456
AServer08 (Linux) system: user root password 123456
A-1: Login security reinforcement (Windows, Linux)
Please make corresponding settings for server Windows and Linux as required to improve the server's safety.
1. Password policy (Windows, Linux)
a) The password policy must meet both uppercase and lowercase letters, numbers, and special characters (Windows). The password must comply with Screenshot of the attribute configuration interface for complexity requirements:
b) The password policy must meet both uppercase and lowercase letters, numbers, and special characters (Linux). Change the /etc/pam.d/system-auth configuration file The corresponding part of the screenshot:
c) The minimum password length is no less than 8 characters (Windows), and the screenshot of the property configuration interface of the minimum password length:
d) The minimum password length must be no less than 8 characters (Linux). Take a screenshot of the corresponding part of the /etc/login.defs configuration file