Elements and Performance Criteria

The range statement relates to the unit of competency as a whole. It allows for different work environments and situations that may affect performance. Bold italicised wording, if used in the performance criteria, is detailed below. Essential operating conditions that may be present with training and assessment (depending on the work situation, needs of the candidate, accessibility of the item, and local industry and regional contexts) may also be included.

Server may include:
application or web
building environmental assessment (BEA) Weblogic
Certificate authority
email
file and print
firewall
file transfer protocol (FTP)
IAS - RADIUS
IBM VisualAge and WebSphere
Microsoft domain controllers
Novell Directory Services (NDS)
proxy or cache
routing and remote access, e.g. using virtual private network (RRAS-VPN).
Users may include:
external client
intranet
remote.
Protocols may include:
CHAP and PAP
Kerberos
lightweight directory access protocol (LDAP)
network level authentication
NTLM
open LDAP
simple and protected GSSAPI negotiation mechanism (SPNEGO)
security support provider interface (SSPI).
Methods may include:
certificates
challenge response
face, voice and unique bio-electric signals
fingerprint
ID card
other biometric identifier
pass phrase
password
PIN
retinal pattern
security token
signature
software token.
Network may include:
data
internet
large and small local area networks (LANs)
national wide area networks (WANs)
private lines
use of the public switched telephone network (PSTN) for dial-up modems only
voice
VPNs.

The evidence guide provides advice on assessment and must be read in conjunction with the performance criteria, required skills and knowledge, range statement and the Assessment Guidelines for the Training Package.

Overview of assessment

Critical aspects for assessment and evidence required to demonstrate competency in this unit
Evidence of the ability to:
design and deploy authentications solutions to the business technology environment and business needs
configure authentication software or tools
monitor and test authentication process after implementation
ensure authentication solutions are current.
Context of and specific resources for assessment
Assessment must ensure access to:
site or prototype where network authentication may be implemented and managed
network support tools currently used in industry
organisational security policies related to authentication, manufacturer recommendations and current authentication standards, including biometric authentication adaptors
appropriate learning and assessment support when required.
Where applicable, physical resources should include equipment modified for people with special needs.
Method of assessment
A range of assessment methods should be used to assess practical skills and knowledge. The following examples are appropriate for this unit:
verbal or written questioning to assess candidate’s knowledge of:
current and emerging authentication processes
features and limitations in vendor solutions, operating systems and software
direct observation of candidate demonstrating management of authentication processes in a range of complex systems
review of documentation prepared by candidate to manage authentication processes.
Guidance information for assessment
Holistic assessment with other units relevant to the industry sector, workplace and job role is recommended, where appropriate.
Assessment processes and techniques must be culturally appropriate, and suitable to the communication skill level, language, literacy and numeracy capacity of the candidate and the work being performed.
Indigenous people and other people from a non-English speaking background may need additional support.
In cases where practical assessment is used it should be combined with targeted questioning to assess required knowledge.