Skip to main content

Sysadmin of CIT Pulchowk; secure system

Short answer

Roles include installing and maintaining hardware, OS, servers, and network; managing user accounts, quotas, and groups; performing scheduled backups; monitoring performance and security; and enforcing policies. To keep the system secure, enforce strong authentication and least privilege, use firewalls and VLANs, apply updates promptly, encrypt communications, review logs, ensure physical security, and maintain a tested disaster recovery plan with redundant hardware and off-site backups.

Suppose you are employed as a system administrator of CIT, Pulchowk campus. Detail your roles and also suggest the following ideas to maintain a secure and reliable system.

As the system administrator of the computer network of IOE Pulchowk Campus (students, teachers, labs, servers, internet), assuming about 1000 users and several labs, my roles and suggestions are below.

My roles

  1. Install and maintain lab computers, servers (web, mail, DNS, file/DHCP) and the campus LAN/Wi-Fi.
  2. Account management: create accounts for students and staff each year, set quotas and groups, remove accounts of those who have left.
  3. Backup and recovery: daily incremental and weekly full backups of servers, results and records.
  4. Monitoring of servers, bandwidth and logs; troubleshooting user problems.
  5. Software management: licences, updates, lab software images.
  6. Policy and documentation: acceptable-use policy and records.

Ideas to keep the system secure and reliable

  • Authentication: strong passwords with periodic change, no sharing; two-factor for administrators.
  • Least privilege: use root only when needed, restrict students to ordinary accounts; proper file permissions and ACLs.
  • Firewall and network: a firewall at the campus gateway, separate VLANs for labs, administration and Wi-Fi; close unused ports.
  • Updates: apply OS patches and security updates promptly; install antivirus.
  • Encryption: SSH instead of telnet, HTTPS, encrypted Wi-Fi (WPA2).
  • Logging and intrusion detection: review logs, use IDS, track failed logins.
  • Reliability: UPS and generator, RAID disks, redundant servers, regularly tested backups kept off-site.
  • Physical security: locked server room, access control, CCTV.
  • User awareness: training on phishing, piracy and safe use.
  • Disaster recovery plan: written steps for restoring service after failure.

✓ Answer checked by Claude Opus 5.5 (high effort)

Related questions

All Operating System chapter 9 questions →