Practice assessment: the Mavikaya Logistics small office
You assess the small-office network of the fictional Mavikaya Logistics from scope to report: you build an inventory, audit shares, the printer, the intranet and passwords, and retest the fixes.
Level 201 · 18 lessons · 15 practice labs
Lessons
Brief and scope
- The brief: the assessment Mavikaya Logistics asked for
- Reading the scope and the rules together
- Kick-off meeting notes and assumptions
- Short task: prepare the assessment plan and checklist
Inventory
- Finding the devices on the office network
- The service map: file server, printer, intranet
- Matching unlisted devices with their owners
- Short task: complete the office’s asset inventory table
Audit
- Auditing file share permissions
- Default settings on the printer’s admin panel
- Directory listing and an outdated version on the intranet server
- Weak password audit of office accounts
- Exposed backup files
- Short task: validate the findings and rank them by severity
Remediation and report
- A realistic remediation plan for a small team
- Retesting the fixes
- A plain-language report for a small business
- Capstone: report the Mavikaya Logistics assessment and close it with a retest
Practice labs
- Extract assumptions and open questions from kickoff notes: Read Mavikaya Lojistik's kickoff notes and list the assumptions and the questions that need answers separately.
- Prepare the plan and checklist for the small office assessment: Prepare a two-day test plan and an office-specific checklist based on the scope and rules.
- Resolve a conflict between scope and the client's request: Write the scope change note and required permissions for the cloud email service the client wants to add later.
- Find the devices on the office network and add them to the inventory: Find the live devices on the lab office network and record each one's address, vendor and likely role in the inventory table.
- Build a service map for the file server, printer and intranet: Identify the services and versions on the office's three main servers and map which user group uses which.
- Find the device missing from the inventory and match it to its owner: Identify the undocumented device by address, MAC vendor and services, find its likely owner from the notes and complete the inventory.
- Audit this SMB share's permissions and report them: List the shares on the office file server and record the world-readable ones and the sensitive folders inside them.
- Audit and fix the default settings on the printer admin panel: Find the default password and open management protocols on the lab printer panel, change them and retest.
- Find and close the outdated version and exposed backups on the intranet: Find the outdated software version, directory listing and downloadable backup on the intranet server, rank them and close them.
- Measure weak office account passwords against the policy: Test the lab office accounts' password hashes against a small list and report the share of accounts that fail the policy.
- Find the shared admin account and plan the move to personal accounts: Confirm the same admin password is used on several devices, change it and write the plan for moving to personal accounts.
- Validate the office findings and rank them: Validate all findings from the audit phase, drop the false alarm, rank the rest by business impact and justify the order.
- Write a realistic remediation plan for a small team: Prepare a plain plan for an office with one IT person, grouping findings into this week, this month and this quarter.
- Retest the office fixes: Retest four findings reported as fixed, prove which closed and which remain, and update the tracker.
- Report the Mavikaya Lojistik assessment in plain language and close it: Write a plain report for the non-technical owner, add the retest results and complete the closing summary.
About this course
You assess the small-office network of the fictional Mavikaya Logistics from scope to report: you build an inventory, audit shares, the printer, the intranet and passwords, and retest the fixes.
What you will learn
- Brief and scope
- Inventory
- Audit
- Remediation and report
Prerequisites
Finishing the level 101 courses of the same path, or knowing those topics, is enough.
Lab environment
Lessons run in your own Kali Linux terminal in the browser, connected to a private lab network. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 201; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.