IT Essentials v7 220-1002 Skills Assessment (Instructor Version)

Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only.

Background / Scenario
The students are provided with an administrative account.

Configuration Item Specification

User name: ITEadmin

Password: Skills@ssessment
Account Type: Administrator

Required Resources
 A Windows computer per student / group witha network connection to a classroom LAN
 A partner on the same network with a Windows computer for remote desktop access
 A Linux computer controlled by the instructor for the classroom that all the students can connect to: It can
be a VM or a standalone.
This SA was designed with flexibility in mind. Depending on the needs of the classroom, you can choose the
numbers of tasks or the order of the tasks that will be performed in this SA.
Tasks 1 – 4 can be performed without local LAN access.

Required Resources from Instructor for Task 5

 A standalone Linux computer or VM with network connection with the classroom lab computers (Task 5)
 Classroom LAN

Task 1: File System Management

Step 1: Create a System Restore Point
Lab – System Restore in Windows
Create a restore point on C: using the following specifications:

Configuration Item Specification Points

Restore point name: SA Restore Point – (your initials) 10

Instructor: Click Control Panel > System > System protection > Create. To look for the Restore point, click
Control Panel > System > System protection > System Restore… > Next and verify that the student’s
restore point is listed.
Step 2: Create a new partition
Lab – Create a Partition in Windows

Configuration Item Specification Points

Shrink the C: partition to create a new blank 5

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 1 of 7 www.netacad.com
IT Essentials v7 220-1002 Skills Assessment

Configuration Item Specification Points

partition of at least 2GB

Drive letter for the new partition H: 5
Volume label for the new partition ITE_SA 5
File System NTFS 5

Instructor: Verify that the student has created a second partition with at least 2GB of space.
Step 3: Create Directories Using CLI
Lab – Common Windows CLI Commands
Create the directories using CLI. Record the commands used to create the folders.

Directory Names CLI Points

C:\Users\ITEadmin\BitLocker_Key blank 5

H:\Course Blank 5

H:\Staff Blank 5

H:\Backup Blank 5

Directory Names CLI Verification

md C:\Users\ITEadmin\BitLocker_Key
or
C:\Users\ITEadmin\BitLocker_Key mkdir C:\Users\ITEadmin\BitLocker_Key C:\Users\ITEadmin> dir
md H:\Course or C:\Users\ITEadmin> dir
H:\Course md H:\Course H:\Staff H:
mkdir H:\Staff or C:\Users\ITEadmin> dir
H:\Staff md H:\Course H:\Staff H:
mkdir C:\Users\ITEadmin\Backup or
C:\Users\ITEadmin\Backup md C:\Users\ITEadmin\Backup C:\Users\ITEadmin> dir

Step 4: Enable Bitlocker on H: drive

Lab – Enable BitLocker
Enable BitLocker on H: drive. Record the key

BitLocker Key Points

Enable BitLocker on H: drive.

Use Skills@ssessment as the password. 10
Save the key in a file in the C:\Users\ITEadmin\BitLocker_Key.

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 2 of 7 www.netacad.com
IT Essentials v7 220-1002 Skills Assessment

Instructor Sign Off Task 1: ___________________________________________________

Points: _________________________________ of 60

Task 2: Local Users and Groups

Lab – Configure Users and Groups in Windows
Create more local user accounts with different level of privileges and local account policies.
 Student01 – A standard user account with only read permission for H:\Course and belong to ITEStudent
group.
 Staff01 – An administrative user account with all the permissions for H:\Course, H:\Staff, and H:\Backup.
Staff01 belongs to the ITEStaff group.
 ITEadmin belongs ITEStaff group.
 ITEStaff group: Members have full control permission to H:\Staff, H:\Course, and H:\Backup
 ITEStudent group: Members only have read permission to the H:\Course.

Step 1: Create Local Groups and Permission

Local Group Permission Points

Read-only permission to H:\Course

ITEStudent 10
No access to C:\Users\ITEadmin\Backup and H:\Staff
Full control permission to H:\Course,
ITEStaff 10
C:\Users\ITEadmin\Backup, and H:\Staff

Instructor: Verify the user account creation in Control Panel > Computer Management > Local Users and
Groups > Groups.
Verify the folder permission for H:\Course, H:\Staff and H:\Backup
Step 2: Create Local Users and Assign Groups

Local User Permission Points

Standard user
Student01 Password: Student01pass 10
Belongs to ITEStudent group
Administrator
Staff01 Password: Staff01pass 10
Belongs to ITEStaff group
ITEadmin Belongs to ITEStaff group 5

Instructor: Verify the user account creation in Control Panel > Computer Management > Local Users and
Groups > Users.
Share the H:\Course folder using the following specifications:

Configuration Item Specification Points

Folder name SA Share 1

User share ITEadmin 1
Permission level Full Control 1

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 3 of 7 www.netacad.com
IT Essentials v7 220-1002 Skills Assessment

Configuration Item Specification Points

Instructor: The H:\Course is name SA Share. Then right-click the folder and select Properties. Click the
Sharing tab and then click the Share button. Verify that the user ITEadmin is listed and has a permission
level of Owner.
Instructor Sign Off Task 2: ___________________________________________________
Points: _________________________________ of 48

Task 3: Windows Security

Lab – Check for Updates in Windows
Lab – Configure Windows Local Security Policy
Lab – Configure the Firewall in Windows
Step 1: Windows Update
Configure Windows Update settings with the following specifications in Windows 10:

Configuration Item Specification Points

Choose the option that it is ready for widespread use in

Updates installed 5
organizations.
Receive a notification when PC requires a restart to finish
Update notifications 5
updating

Instructor: Click Start > search PC Settings > click Update & Security > click Advanced options >
Security and Maintenance > Change settings. Verify that the above parameters have been selected.
Configure Windows Update settings with the following specifications in Windows 8.1 and 7:

Configuration Item Specification Points

Check for updates but let me choose whether to download and

Important updates 5
install them
Recommended Give me recommended updates the same way I receive important
5
updates updates

Instructor: Click Control Panel > Windows Update > Change settings. Verify that the above parameters
have been selected.
Step 2: Password Policy
Use the Windows Local Security Policy tool to configure the following security policy settings:

Configuration Item Specification Points

Enforce password history: 3 passwords remembered

Maximum password age: 90 days
Password Policy 4
Minimum password length: 8 characters
Password must meet complexity requirements: Enabled
Account Lockout Policies Account lockout duration: 5 minutes 3
Account lockout threshold: 5 invalid login attempts

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 4 of 7 www.netacad.com
IT Essentials v7 220-1002 Skills Assessment

Configuration Item Specification Points

Reset account lockout counter after: 5 minutes

Audit account logon events: Success, Failure
Audit Policy 2
Audit logon events: Success, Failure

Instructor: Click Search, then enter secpol.msc to access the Security Policy tool. Verify that the above
parameters have been selected.
Step 3: Firewall Configurations
Allow Remote Desktop in private network using Firewall configurations.

Configuration Item Specifications Points

Windows Firewall Allow Remote Desktop in private network 3

Instructor: Click Control Panel > click Windows Firewall or Windows Defender Firewall > click Allow an
app or feature through Windows (Defender) Firewall > check Remote Desktop for the private network.
Instructor Sign Off Task 3: ___________________________________________________
Points: _________________________________ of 32

Task 4: Administrative Tasks

Lab – Configure Data Backup and Recovery in Windows
Lab – Task Scheduler in Windows
Lab – Basic Scripting
Step 1: Data backup and recovery
Configure an available partition for backup and recovery with File History.

Configuration Specifications Points

Use the default settings

File History Configure a shared location assigned by the 2
instructor

Step 2: Run a Windows script as a scheduled task

Configuration Specifications Points

@echo off

echo copy the content of H:\Course to

Copy the provided text into
a file
Save the file in H:\Staff as a
script that can be run
Run the script
C:\Users\ITEadmin\Backup
copy H:\Course C:\Users\ITEadmin\Backup 5
echo copy the content of H:\Staff to
C:\Users\ITEadmin\Backup
copy H:\Staff C:\Users\ITEadmin\Backup
pause
Hint: View hidden file extension 2

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 5 of 7 www.netacad.com
IT Essentials v7 220-1002 Skills Assessment

Configuration Specifications Points

TaskName: Staff and Course Backup

Create a basic scheduled
This task will run the script daily 6
task
Fix the script so it does not require any user intervention

Instructor Sign Off Task 4: ___________________________________________________

Points: _________________________________ of 15

Task 5: Remote Access

Lab – Work with Linux Command Line
Lab – Remote Desktop in Windows
Students should work in pair to configure remote access.

Configuration Specification Points

Allow remote desktop 2

Determine the IP address of both computers 2
Only allow ITEadmin to log on remotely 2
Instructor can provide the necessary file to
Log into the remote machine and install
install PuTTY or other program that supports 2
PuTTY on the remote PC
SSH
Instructor will provide the IP address and user
SSH into a Linux machine with SSH enabled 2
credentials to log on
Create a text file in the student’s home
2
directory

Instructor Sign Off Task 5: ____________________________________________________

Points: ___________________________________ of 12

Task 6: Clean up
As you undo your configuration in the lab environment, document the steps that were necessary to restore the
lab environment back to the original state.

Task Specifications Points

Run System Restore Blank blank

Remove Scheduled Task Blank blank
Remove folders from
Blank blank
C:\User\ITEadmin
Remove the new volume and extend
Blank blank
C: to include the volume
Remove created users and groups Blank blank
Restore the password and audit policy Blank blank
Verify remote desktop has been
Blank blank
disallowed

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 6 of 7 www.netacad.com
IT Essentials v7 220-1002 Skills Assessment

Instructor Sign Off Task 6: __________________________________________________

Points: _____________________________________ of 20
End of Document

 2018 - 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 7 of 7 www.netacad.com