#information technology assignment

It is vitally important that your assignment is clearly laid out with ques-tions and parts of questions clearly defined. It must be a straight for-ward matter for the examiner to determine that you have completed each exercise satisfactorily. We want quality not quantity. Poorly or-ganised submissions will be rejected or receive a poor mark.

A text file or PDF/A document typeset using vanilla LATEX are preferred over a document produced by a word-processor. If you must use Mi-crosoft Word please export your document as PDF/A1 not PDF.

Command Output

When answering these questions you will have to run commands under Linux—whenever a command is run you will need to:

explain in your own words the purpose of the command in the context of the assignment question. (Please do not just copy the “Description” section from the man page!) Also, you need to ex-plain in your own words all terminology used—as if you were ex-plaining to an average user! (Please show you understand what you are doing!)

PDF/A is an archival format of PDF that embeds all fonts used in the document within the PDF file. To ensure PDF/A format in Word check “ISO-19005-compliant (PDF/A)” under “Options” when saving a file as PDF. LATEX produces PDF/A by default.

show that the command worked—either from its output or the output from another command. For example

To capture text output from programs you will have to redirect the output to a file or use the command script. If you are us-ing the command script turn off the tty escape sequences that change the colour of console text—the escape sequences will ap-pear in output file and make it impossible to read.

Late Submission of Assignments

Students can apply for an extension of time to submit an assignment at any time up to the deadline. Students are advised to make a request for an extension as soon as their need becomes apparent. Delay in making a request involves the risk of losing marks if the request is refused.

Applications for extensions must be made via email or USQAssist to the examiner together with accompanying documentation as specified in the Assessment of Compassionate and Compelling Circumstances Pro-cedure.

An assignment submitted after the deadline without an approved exten-sion of time will be penalised. The penalty for late submission without a pre-approved extension is a reduction by 5% of the maximum mark applicable for the assignment, for each University Business Day or part business day that the assignment is late. An assignment submitted more than ten University business days after the deadline will have a Mark of zero recorded for that assignment.

The Examiner may refuse to accept assignments for assessment pur-poses after marked assignments and/or feedback have been released.

Please consult the USQ Assessment Procedure for the complete USQ policy on assessment.

Non-submission of Assignments

As per the USQ Assessment Procedure — for a student who has failed to achieve a passing final grade by 5% or less of the total weighted marks, the Examiner, in agreement with the Moderator, will consider recom-mending to the Board of Examiners the undertaking of Supplementary Assessment by the Student. This offer will normally only be made if the Student has undertaken all of the required Summative Assessment Items for the Course—that is, submitted all of the assignments!

Student Responsibilities

The assessment procedure also outlines the following student responsi-bilities:

If requested, Students must be capable of providing a copy of As-signments submitted. Copies should be despatched to the Uni-versity within 24 hours of receipt of a request being made

Students are responsible for submitting the correct Assignment.

Assignment submissions must contain evidence of student effort to address the requirements of the Assignment. In the absence of evidence of Student effort to address the requirements of the assignment, no Mark will be recorded for that Assessment Item.

A Student may re-submit an Assignment at any time up to the deadline. A request to re-submit after the deadline is dealt with in accordance with section 4.4 ‘Deferred, Supplementary and Varied Assessment and Special Consideration’ of these procedures.

Academic Misconduct

Academic misconduct is unacceptable and includes plagiarism, collu-sion and cheating:

plagiarism :     involves the use of another person’s work without full and clear referencing and acknowledgement

cheating :    involves presenting another student’s work as your own

collusion :     is a specific type of cheating, that occurs when two or more stu-dents fail to abide by directions from the examiner regarding the permitted level of collaboration on an assessment.

All are seen by the University as acts of misconduct for which you can be penalised. For further details go to the Library’s site on

Question 1 (marks 25)

A research group at your institution wants to incorporate revision con-trol into their project so they can track the user changes made to the code being using.

The main software package they use is Mercury a high precision integrator for studying the long-term stability of planetary systems, the orbital evolution of comets, asteroids or meteoroids, and simulating planetary accretion. The revision control system they wish to use is Git as it is employed by their collaborators.

They have come to you to write a Git HOWTO using the Linux Git command-line interface and with explicit examples using the Mercury code base. All work on the code will be done on the institution’s Linux HPC, so all user repositories will be local to that machine. They store the “master” code base on their HPC in the directory /home/Mercury/mercury6. This directory is readable and writeable by the Unix group “mercury”. All researches using the code are in that group.

The HOWTO needs to cover the following topics

A basic description of Git and how it differs from other revision control systems, such as CVS, SVN, darcs, etc.

A short description of the user’s basic workflow when using a Git repository.

How to initialise a Git repository for an existing code base. In this case the master code in the directory /home/Mercury/mercury6.

How to clone an existing master Git repository to a local working repository.

How to add new files and modified files to the local working Git repository.

How to recover a particular version of a file from the local Git working repository.

How to check the status of the local Git repository.

How to view the change history of the local Git repository.

How to push local repository changes back to the master Git repository.

How to pull changes from the master Git repository into the local Git repository.

Permissions that must be set on the master Git repository so that it can be cloned by users in the research group.

Permissions that must be set on the users’ local repository so changes can be pushed to the main repository.

Notes:

The purpose of every Git command used must be explained.

The options used for every Git command must be explained.

Every Git command mentioned must show an example of the command using the Mercury code base.

Every Git command example must include the command output.

The code in the directory /home/Mercury/mercury6 is the Master and all users are pushing their local changes to the master, and pulling other peoples changes from the master to their local copy.

The Mercury code is used by the USQ Astronomy group to model the dynamics of Exo-planetary systems. A typical modelling se-quence requires running the code a million times with each run integrating the system forward in time a million years and log if the system is stable or unstable (a planetary collision or ejection).

The “git” packages are not installed on the virtual machine, they will need to be installed if you plan to use it to do this question. To install any packages the guest NAT network which connects the guest OS to the Internet through the host’s Internet connection must be brought up. To “bring-up” the NAT interface see the man-pages ifup(8) and interfaces(5)

Question 2 (marks 25)

Authentication under modern Unix systems is handled by the Pluggable Authentication Module (PAM) system. In about a page and in your own words explain the PAM system as it is implemented on a Linux distri-bution and why it was introduced.

Using the login service file found in the course virtual machine (see /etc/pam.d/login) as an example, explain how a service is con-figured and discuss the implications of each configuration line. Your explanation should include discussions on the following:

what is the module-type parameter

what is the control flag,

what does it mean that the service file is a stack,

what is a pam module.

Notes:

Be aware that there are subtle differences between different Unix distributions—the question explicitly states discuss the Linux ver-sion only!

The topics above are linked to each other and the question, they are not independent of each other. They are provided as a minimal guide only. Do not simply write an unconnected paragraph on each without linking the concepts together. Marks will be lost if your answer appears to be cut and pasted from the Internet.

List all resources used in answering this question.

Please do not fall into the trap of answering the question by us-ing unexplained technical terms—you must explain all technical terms used especially if they have not been used anywhere else in the course. Assume you a writing for someone who knows nothing about PAM.

Question 3 (marks 25)

Your users require standardised syncing software, but due to security constraints and possible intellectual property rights, syncing to off- site private servers is not an option. The software must also be supported under Windows, macOS, Linux, Android and iOS.

The software being mooted is “syncthing”. You have been asked to test syncthing and write an evaluation report.

The report must contain the following:

A discussion of the syncthing application: how it is different from other syncing software, how it is configured, what informa-tion is required for configuration, how it actually synchronises data, what data is synchronised.

Included with your discussion of syncthing you must include examples of syncthing being installed, configured and used.

The environment used for the examples must be the course virtual machine and its host. This is important, as the guest machine does not have a windowing environment and the host will. So your discussion must include how to install, configure and use syncthing in a non-windowing environment.

Discuss, with examples, the system and user systemd configu-ration required on the virtual machine, so that the user’s instance of syncthing will start running when the user logs in (or the system boots) and continue running after the user has logged out.

The report with examples should be approximately two pages

Notes:

For this question syncthing must be installed on the course virtual machine and its host.

To “bring-up” the host-only interface (the network that links the guests to the host) see the man-pages ifup(8) and inter-faces(5)

It is important to understand how “syncthing” can use the port 8384 for both configuration and data transfer. You need to under-stand which interface handles configuration and which handles data transfer. Once you understand how “syncthing” communi-cates for configuration and for data transfer then manually con-figuring “syncthing” by editing its configuration file is straight forward. Only the GUI configuration needs to be modified.

Question 4 (marks 25)

On modern networked computers, maintaining the correct time on each machine is important. Computers on a LAN or WAN with different times can cause problems.

In about a page and in your own words explain why it is important for computers to maintaining the correct time and more importantly ex-plain how they do it.

Notes:

In your explanation make certain to include discussions on the following linked topics

The computer’s hardware clock (also called the Real Time Clock or RTC)

The computer’s software clock (also called the kernel or sys-tem clock) and why this can be inacurate.

In Linux, how they are synchronised and why do they need to be synchronised? Why can the Linux software clock be so inaccurate?

What is NTP and what are “clock strata”

What is UTC and why is it used? (UTC: Coordinated Uni-versal Time, or Temps Universel Coordonné, and if you want— you can explain what is going on with the acronym!

The topics above are linked to each other and the question, they are not independent of each other. They are provided as a minimal guide only. Do not simply write an unconnected paragraph on each without linking the concepts together.

The question being asked is “…why is it important for computers to maintaining the correct time…” please be certain to answer this question.

List all resources used in answering this question.

Please do not cut and paste slabs of text from a Wikipedia arti-cle. Unconnected paragraphs, though factually correct, will loose marks.

Please do not fall into the trap of answering the question by us-ing unexplained technical terms—you must explain all technical terms used especially if they have not been used anywhere else in the course.

The capture was performed in an internet where all subnets used a /24 mask. The capture was performed on interface eth1 on a computer with the following details:

Use the file and the above information to answer the following sub-questions. Do not try to guess answers; use only the above information, the capture file and your knowledge of networking and security to find the answers.

Several applications were used on several different computers. Complete the table to summarise the applications in use in the network. The columns are:

Application name or protocol, e.g. Web, SSH, ?, where ? means cannot determine from the capture.

Time of use. The time when the application is in use. Round to the nearest second. Use a range, e.g. 0-4 seconds.

The first row includes example values of selected columns. Complete (or edit) and add further rows as necessary. [4 marks]

Address Table

Some of the computers in the network have domain names as well as IP addresses. List the IP address and domain name of each computer with a domain name, and give the packet number where you found the domain name. [2 marks]

Briefly explain how a TCP connection starts (or opens), and how it completes (or closes), using the 1st TCP connection from the capture (and your message sequence diagram above) as an example. [2 marks]

Some of the computers in the network are running a web server. Choose one of the computers and then list which files exist on the web server, and which files do not exist on the web server. Explain how you know the files (that is, refer to the packet number(s) in the capture). [2 marks]

Consider the 1st TCP connection in the capture (which starts at packet number 3 in the capture file). Draw a message sequence diagram that illustrates all packets in that TCP connection. A message sequence diagram uses vertical lines to represent events that happen at a computer over time (time is increasing as the line goes down). Addresses of the computers/software are given at the top of the vertical lines. Horizontal or sloped arrows are used to show messages (packets) being sent between computers. Each arrow should be labelled with the protocol, packet type and important information of the message. Examples of message sequence diagrams are given in workshops. Note that you do not need to show the packet times, and the diagram does not have to be to scale. [2 marks

What is the password? [0 marks – this is challenge, but worth no marks. Don’t tell other students the answer if you find it.]

Marking Scheme

All connections are listed correctly: 4 marks. Minor mistakes in few connections: 3 marks. Missing few connections and/or multiple mistakes: 2 marks. Missing multiple connections and/or many mistakes: 1 marks. Most connections wrong: 0 marks.

2 marks for service table; 2 marks for address table. All entries included: 2 marks. Some entries missing or wrong: 1 mark. Most entries missing or wrong: 0 marks.

All packets clearly shown: 2 marks: Minor mistakes: 1 mark. Multiple packets wrong and/or multiple mistakes: 0 marks.

All computers/domains listed: 2 marks. One mistake: 1 mark. More than one mistake: 0 marks.

Clear explanation  of  connection  open  and  close:  2    Mistakes  or  wrong explanation of one of the steps: 1 mark. Multiple mistakes or wrong explanation of both steps: 0 marks.

All files (both those that exist and those that don’t exist) listed with packet numbers referenced: 2 mark. Some minor mistakes or missing file: 1 mark. Multiple mistakes or multiple missing files: 0 marks.

This sub-question is worth 0 marks. It has no impact on your total marks

Question 2. Web Application Attacks                 [8 marks]

Objective: Understand how real web application attacks work, and methods for mitigating them.

For this question you must use virtnet (as used in the workshops) to study web application attacks. This assumes you have already setup and are familiar with virtnet. See Moodle and workshop instructions for information on setting up and using virtnet, deploying the website, and performing the attack.On node4, add a user to the grading web application with username set to your student ID, and password set to your first name

Perform  an  unvalidated  redirect  attack,  such  that  the  attacker  steals  your username/password.

While performing the attack, take a screenshot of the window showing the stolen username/password.

After performing and understanding the attack, answer the following sub-questions.

Give a short description of an unvalidated redirect attack, referring to the steps you performed in the attack and the vulnerability your attack exploited. [2 marks]

Assuming a website must use redirects, recommend a technique that can be used to minimise the impact of unvalidated redirect attacks. [1 mark]

In the attack you performed in virtnet, describe what methods the attacker used (other than an unvalidated redirect) and how the attacker benefits from the attack (that is, what do they gain and how?). [3 marks]

Include the screenshot of the stolen username/password obtained during the attack. [2 marks]

Marking Scheme

Clear description, demonstrating understanding of the attack: 2 marks. Some mistakes or misunderstandings: 1 mark. Many mistakes and/or lack of understanding: 0 marks.

One relevant techniques clearly described: 1 mark. No relevant techniques or lack of understanding of techniques: 0 marks.

Clear description  of  methods  and  benefits:  3    Minor  mistakes  or misunderstandings  in  description:  2  marks.  Missing  methods  or  benefits;  major mistakes: 1 mark. Lack of understanding of both methods and benefits, or no relevant methods/benefits: 0 marks.

Screenshot showing relevant information: 2 marks. No screenshot or not showing relevant information: 0 marks.

Question 3. Cryptographic Operations with OpenSSL                                                                                                         [9 marks]

Objective: understand and apply different cryptographic primitives, use common encryption software (OpenSSL), and demonstrate secure procedures for key management.

Your task is to use OpenSSL to perform a set of cryptographic operations. When performing cryptographic operations you must be very careful, as a small mistake (such as a typo) may mean the result is an insecure system. Read the instructions carefully, understand the examples, and where possible, test your approach (e.g. if you encrypt a file, test it by decrypting it and comparing the original to the decrypted).

Perform the following steps:

Generate your own RSA 4096-bit key pair. Use the public exponent of 65537. Save your key pair as pem.

Extract your public key and save it as pem.

Create a Bash shell script that contains all OpenSSL commands you used on the terminal in the previous steps, as well as the following steps, and save them in a text file called bash. You should copy-and-paste the actual commands you used from the terminal as they may be used to test your submission. As this script contains commands from steps (a), (b), (d), (e), (f) and (g), you should run those commands first and then put them in your script file, then do them again using the final script.

Sign your Bash shell script using SHA1, saving the signature as bin.

Generate a 256 bit random value using OpenSSL. This value will be used as a secret key. Store the key as a 64 hex digit string in a file txt.

Encrypt your Bash shell script using AES-256-CBC and the key generated in step (e). Use and IV of all 0’s (that is, 32 0’s). Save the ciphertext as ciphertext.bin.

Encrypt your txt file using RSA so that only the Unit Coordinator can view the contents. Save the encrypted key as secretkey.bin.

Multiple files are output from the above steps. You must submit the following on Moodle:

The file names must be exactly as listed above. Use lowercase for all files and double-check the extensions (be careful that Windows doesn’t change the extension).

Examples of the OpenSSL operations needed to complete this task, as well as a Bash script, are on Moodle.

Marking Scheme

Once files are submitted, they will be decrypted/verified using the reverse operations of what you were expected to do.

If  your  files  successfully  decrypt/verify,  and  the  commands  (commands.bash) submitted are correct, then you will receive 9 marks.

If your files successfully decrypt/verify, but the commands contain errors, then you will receive between 6 and 8 marks, depending on the severity of the errors (e.g. small typo vs wrong command).

If your files do NOT successfully decrypt/verify, then your commands will be reviewed to determine what mistakes you made. You will receive between 0 and 7 marks, depending on the severity of the errors.

Up to 6 marks may be deducted for incorrect submissions (e.g. not all files submitted, additional files submitted, wrong files submitted, wrong filenames).

Question 4. Malware Research                                    [9 marks]

Objective: research real malware and gain an understanding of the techniques used in the malware and countermeasures

Ransomware In addition it is estimated there are many more ransomware attacks not being made public, e.g. companies and users paying a ransom but not disclosing the attack. The prevalence of ransomware, and the impact it has on organisations, has led to the discussion of ransomware insurance. Your task is to study what is ransomware, what are the challenges and possible countermeasures, and report on it in an easy-to-understand manner. You must write a short report on ransomware that addresses at least the following issues/topics

What is ransomware?

What are examples of ransomware attacks? For example, names of malware, organisations attacked

What are common methods of infection by ransomware?

What is the payload in ransomware? What cryptographic techniques are commonly used?

How is the ransom obtained? What is the role of Bitcoin (or other cryptocurrencies)

What are the options for users once infected

What countermeasures should users and organisations take to prevent ransomware attacks?

The above is a guide of what should be covered. You may also address other issues, and you don’t have to address them in the order listed.

There is no minimum/maximum length of the report. As a guide 1 to 2 pages of text (not including pictures) may be appropriate. In addition you may include your own pictures (not pictures from other sources) if they are useful in explaining ransomware. Including pictures from other sources, or including pictures that do not help with the explanation will not gain marks and may lead to reduced marks.

You may assume the audience of the report has similar background on network security as you. You should refer to techniques and concepts covered in the unit, and give sufficient technical detail to demonstrate you understand ransomware

At least five (5) references should be included and follow the Harvard (author-date) style.

References may be a mix of websites, textbooks and conference/journal articles

Marking Schem

1 mark will be given for each of the seven (7) topics/issues ((a) to (g)) if they are satisfactorily explained

1 mark will be given if the report is well presented, including: well formatted, few spelling/grammar mistakes.

1 mark will be given if the references are sufficient and appropriate. Inclusion of inappropriate/irrelevant references will result in 0 marks.

Up to 6 marks may be deducted if the report is difficult to read (e.g. due to grammar), includes information irrelevant to the question, and/or includes material (pictures, quotes) taken from other sources.

Business benefit i.e. what will the company gain from this project?

People (who will be working on this, including yourself?)

Equipment

Budget (you can enter “TBA”, which means To Be Advised, if you don’t know)

Start (expected start date)

End (expected end date)

In a commercial project most of this information will come from the scope statement.

Once you have done this, during the course of this week you will complete the Project Context section, then identify and analyse the main risks.

Next week, the last week of Risk Management, you will complete the final section of your plan which we call the “Risk Treatment Plan”

Revise your Risk Management notes

Revise last week’s seminar, “Introduction to Risk Management”, and from the resource, “Risk Management Guide for Small Business”.

This week we start investigating how to complete a “standards based” RMP (Risk Management Plan and you will use as your primary resources the PE Risk Management Plan Template from last week, and again, the Risk Management Guide for Small Business.

The template is split into three parts

Work to be completed this week

Part 1: Project Context

Part 2: Risk Register

Work to be completed next week

Part 3: Risk Treatment Plan

Part 1: Project Context (To be completed this week)

The section gives us an overview of the project and the environment in which it will be managed. Additionally it indicates why the project is needed, what it will deliver, and how this will benefit the company.

The fields include:

Plan prepared by

In this case it will be your name of course, but it would normally be the name of the Project Manager.

Project Sponsor

“A sponsor is the person or group who provides resources and support for the project and is accountable for enabling success.

The sponsor may be external or internal to the project manager’s organization. From initial conception through project closure, the sponsor promotes the project. This includes serving as spokesperson to higher levels of management to gather support throughout the organization and promoting the benefits the project brings.

The sponsor leads the project through the initiating processes until formally authorized, and plays a significant role in the development of the initial scope and charter. For issues that are beyond the control of the project manager, the sponsor serves as an escalation path.

The sponsor may also be involved in other important issues such as authorizing changes in scope, phase-end reviews, and go/no-go decisions when risks are particularly high. The sponsor also ensures a smooth transfer of the project’s deliverables into the business of the requesting organization after project closure.” (PMBOK guide, Fifth Edition, p123).

Project Name

what's in a name?

This is a short name to make it easy to reference the project, e.g. “Windows 12 Upgrade”. In many organisations, a register of projects is maintained by the Project Management Office, and they issue “names” (often containing numbers, e.g. XY-789-01) for the Project Managers to use.

Project description

This will be one or two sentences, e.g. “Upgrade all desktop computers to MS Windows 12”

Problem it is seeking to solve

This can be a problem to solve (a threat) or a benefit to pursue (an opportunity). E.g. “We need to implement a new ERP system, but it will run only on Windows 12, so all our computers need to be upgraded to Win 12”

Project Deliverables

The products, services or results that the project will deliver. E.g.. “Computers upgraded to Windows 12, support manuals updated, staff trained in Win 12”

Business Benefit i.e. what will the company gain from this project?

The key phrase in this sentence is “business benefit”. In our example, upgrading to Windows 12 is not a business benefit; it is simply an “enabler”. In this case the business benefit could be, “The company will be able to use the new ERP system, to increase efficiency”.

Resources to be applied

What will it take to produce these deliverables?

Peoplewho will work on this project, including yourself (names and/or positions are acceptable) e.g. PM (Project Manager), software analyst, 2 programmers, tester, etc

Budget:approximate amount of money allocated specifically for this project

Equipment:if it must be obtained especially for this project

Estimated Project Duration:the expected start and end dates

Part 2: Risk Register (To be completed this week)

There are three main steps to creating a Risk Management plan

Identify the risks

Analyse the risks, and

Treat the risks

Important note:

In last week’s lesson you learned that risk analysis occurs at two levels:

Qualitative Risk Analysis

This is the first step. It is a subjective analysis, and usually employs words, such as “low”, “medium” and “high” rather than numbers (but simple number can be used, e.g. 0 to 5, to keep engineers happy).

Quantitative Risk Analysis

When you have completed your qualitative analysis, the more important risks may be subjected to quantitative analysis (more precise numbers, data ranges, and historical information)

For PE you will carry out Qualitative Risk Analysis only

You will notice in the note above for Quantitative Analysis, it says “ important risks may be subjected to quantitative analysis ”.

According to the PMBOK guide, it might not always be necessary to Perform Quantitative Risk Analysis and it’s up to the project manager to decide if it can be justified on the project. (PMBOK guide, Fifth Edition, p335).

Do not change any of the risk management template formulaeQuestion 1

Identity your project’s risks

Using the RMP

template  and

after discussion with your supervisor, complete the

left hand

Side of Part 2: Risk Register (i.e. the first five columns, ending in “Risk Consequences”. You should list at least 8 possible risks.

Details of fields in the RMP Risk Register:

Risk Ref. No:This is just a sequential number, used as a key for associating with the Risk Treatment Plan.

Category:Select Commercial, Finance, Security, Safety, or Legal/Regulatory from the drop down list. You may have more than one risk in a category.

Risk Description:g. “Older scanners may not work under Windows 12”.

Risk Cause:g. “Drivers may not exist for Windows 12”.

Risk Consequences:g. “Invoices cannot be scanned in”.

Upload your updated template to the Forum by Wednesday night.

Question 2

Analyse your project’s risks

Analyse the risks in your project; you may discuss these with your supervisor. Using the RMP template again, complete the right hand side of Part 2: Risk Register (i.e. Impact and Likelihood). Do not change the Rating column, it will be calculated for you automatically by the spreadsheet.

Upload your updated template to the forum by Saturday midnight AEST.

Marks Allocation:

Remember marks are awarded on your work as follows:

0 marks if there has been no reading of seminar and module overview as applicable in the week.

1 mark if reading of the seminar/module overview as applicable, has happened

2 marks if seminar/module reading has occurred and there is some quality work but it is not of sufficient quantity and/or timeliness

3 marks if above conditions are met and it has appropriate references to support the argument and discussion

4 marks if all the requirements in 1,2 &3 above are present and the work demonstrates a high quality of engagement and thought.

Week 7 Journal

Reflect on this week’s Professional Environments, Internship activities and learning. Remember that this is your document to help you recall new and significant things from your week and plan for your future. Only you and your tutor can read this journal.

You should write at least 200 words on something you have learned this week that may include:

what you have learned

what is happening in your internship

how you are relating what you have learned to what is happening in your workplace

other aspects of your professional development

an article you have read

an event that you have attended

something that may have happened in the workplace that has resulted in your learning about our different workplace culture

an interview you had, or a presentation you may have given.

NOTE: If you are not currently in an internship, or have completed your internship, you should consider reflecting on some of these other related activities.

Your reflection may cover more than one of these categories.

Use the Reflective Journal Reading article as a guide to possible career development activities.

Marking Guide:

0 marks if there has been no journal entry.

1 mark if you simply summarise what you have learned in the seminar this week

2 marks if you just summarise your seminar and list your internship activities

3 marks if you can relate what you have learned in the seminar to your internship or other workplace activities

4 marks if your journal shows reflective thought and application of what you have learned this week to your ongoing and future professional development.