Why do you all think I am asking you to install multiple virtual machines with different operating systems using 2 different types of virtual machines hosting technology? Doesn’t it seem like a lot of work to have to download iso/dvd/exe files from the web and install them when we could just use MS Azure and host them in the cloud?
Why don’t I just ask you to sign up for azure and install one instance of windows server and do the OS lab? Why Linux, Windows Server 2012 and Windows 2008 both local and cloud based?
Do you think configuring 3 different types of operating systems will ever help you become better IT Auditors? Feel free to agree or disagree!
Heiang Cheung says
This definitely help us as future IT auditors because every company don’t have the same kind of operating system. Being able to familiarize ourselves with three different types of OS and two different type of VM definitely help in an IT auditors because we would know how to navigate and audit multiple OS.
Folake Stella Alabede says
I completely agree with Heiang’s comment, different organizations use different operating systems and have differing computing and security environments.
In addition, one organization might use more than one operating systems for different purposes. For example, an organizations Enterprise architecture could be running on Linux, while the servers could be running on windows O.S and etc.
Another example I can think of is a company I once worked with who was always acquiring other companies who already had a different type of O.S from the one being used by the mother company. And there were always talks about merging and using a single O.S, It took place over (a long) time, and sometimes never. So in the interim, regular audits had to be done for the different O.S being operated.
Though it is not recommended as best practice by some security experts to have multiple Operating systems; Referencing an article from gartner.com, Gartner has found that the total cost of ownership for heterogeneous computing environments is significantly higher than for single-system enterprises. Multiple operating systems inevitably require multiple IT skill sets for administration and management – staff with those skill sets will be more expensive.
However, he also noted that a diverse operating system environment is more resistant to infection; supporting diversity of operating systems, especially on the desktop, has numerous security benefits, but it comes at an operational cost. Enterprises that maintain 10% or more of their desktops on an alternative operating system, such as Linux or Macintosh OS, are much less vulnerable to business outages than those that use only one operating system, such as Windows.
Even though it is expensive to operate more than one O.S, it is possible to be employed by an organization that uses more than one O.S
Configuring 3 different types of OS I believe will help make a better auditor, it gives familiarity and more insight into the word of operating systems in its diversity, because it cannot be disputed that a computers operating system is one of the most important parts of a computer system.
I’m not sure why we have to do local and cloud based though, I guess it might be that companies are now doing a of cloud based hosting, so probably to get an understanding of how a cloud based operating system works ???
Andres Galarza says
I took the local and cloud based tasks to be exposure on how to get both hypervisors up and running. It’s a slightly different process on the two different platforms.
Patrick J. Wasson says
I absolutely want you to understand how cloud based hosting services work! They are extremely common now!
Somayeh Keshtkar says
First, I think virtual machine can provide concurrent, interactive access to a mainframe computer.
Each virtual machine is a replica of the underlying physical machine and users are provided with the opportunity of running various operating systems directly on the physical machine.
Second, one of the benefits of using virtual machines is that the ability to run multiple configurations of operating systems with different set of software technology and configuration. This is very helpful for running various applications that require different configuration in parallel. The other benefits that we can consider are isolation and resource sharing, so Virtual machines such as VMware can provide this opportunity for users to use different operating systems at the same time without any hardware overhead.
To answer the second part of the question, it’s very valuable to know both methods; using Virtual machine software, and cloud services such as Azure. Considering the fact that Azure and other cloud services such as AWS are PII, HIPA, and PIC compliance (except the fact that AWS is still not HIPA compliance) they seem to be the easiest and more manageable way to configure and maintaining virtual machines. However, due to some internal IT policies, some organization may prefer to manage their own virtual machines on company’s hardware. In such cases, knowing both methods would be beneficial to us.
Because they have different set of software technologies and configurations. Some applications can run, or perform better, on a specific operating system. For example Apache web server runs much more reliable on Linux based operating systems. Some other applications may run on a specific version of an operating system. For example a web application can be run on a specific version of Windows due to licensing issues. Therefore we need to know how to install a specific version of Windows operation system. I think knowing about different operating system can be helpful for IT Auditors. As IT Auditors it is really important to be familiar with these technologies, and terminologies that IT departments utilize.
Hanqing Zhou says
I agree with what you tell us to do in these weeks. There are three main points to supports my concept.
First of all, as an IT Auditing student, to know about how to install and operate Virtual machines is an important knowledge for us to know about different kinds of operation systems. As an user, Virtual machines can help us touch with different multiple configurations of operating systems, different set of software, and the ability to share and separate information between the PC and Virtual machines.
Second, not every company uses the same operating system, using Virtual machines with different types of operation system can help us competent for any job.
Finally, hackers and IT developers are spears and shields, they fight to each other. In nowadays, hackers controls many superb skills. Therefore, diverse operating system environment is more resistant to infection.
Hence, know about Virtual machines and different kinds of operation systems is good for us to become an IT Auditors.
Fraser G says
I think the reason you like us to use so many different variations of OSs and on different hardware/platforms is to 1: Gain experience using these platforms and 2: Get used to a heterogeneous environment. A big overarching theme I pick up on from the classwork and from presentations is to get comfortable with diving in to systems and architecture that we are unfamiliar with. Stepping back from that, is the idea of getting used to trying new things out and learning how to figure stuff out.
The hands on stuff provides a good practical background and I have to say I am pretty comfortable using VMs now, and from a behavior perspective these kinds of exercises give me confidence to figure it out, rather than just asking for help every-time I have a problem.
Ping Sun says
Yes, of course that is helpful for us to get the experience for the system of Linux, Windows 2012 and Windows 2008 because if we want to be IT auditors, we will defiantly face many different operating systems. Linux (and Unix) and Windows are the most popular operating systems today and most companies and organizations are using them. As IT auditors before we audit the system and find out the risk or problems from the organizations, we need to at least understand how to use them and how these systems work. As IT auditors, we need to keep learning new things and not just mark time. If today a new operating system that out of Linux and Windows created and become popular, we also need to add it to our learning list.
For the VMware and Azure, I also agree that we should try both because although Azure is easier to use, it is a online service. It always involve to something like information security and risks. Otherwise, for my own understanding, we need to get the skill to resolve auditing problem without network. As IT auditors, if we need to audit a system or a computer without any connection with internet, we need to have the capability to do our job by the computer itself.
Andres Galarza says
Q1: Why do you all think I am asking you to install multiple virtual machines with different operating systems using 2 different types of virtual machines hosting technology? Doesn’t it seem like a lot of work to have to download iso/dvd/exe files from the web and install them when we could just use MS Azure and host them in the cloud?
It is a lot of work! However, it’s good exposure for us to get accustomed to different tools and different operating systems. For myself, I’d used VMware Workstation a number of times before in classes. However, I’d never used a cloud-based hypervisor (is it even called a hypervisor if it’s on the cloud?). Spinning up an instance in Azure was good experience, and now I can say that I’ve used it before.
Q2: Why don’t I just ask you to sign up for azure and install one instance of windows server and do the OS lab? Why Linux, Windows Server 2012 and Windows 2008 both local and cloud based?
Similar to above, playing around with different operating systems is essential to building a solid auditing foundation. I get the feeling that the goal for this class is to have us avoid being in a situation where we’re stumped completely when facing a piece of hardware or software. A Linux distro is very different from a Microsoft OS. Furthermore, even though Server 2012/2008 are Windows OS, they have differences from the more standard Windows 7/10 OS.
Q3: Do you think configuring 3 different types of operating systems will ever help you become better IT Auditors? Feel free to agree or disagree!
It certainly can only help. I think the experience and staying humble about what you don’t know makes for a great auditor.
Patrick J. Wasson says
Great response Andres!!!
Xinteng Chen says
It is important for us to know different types of operation systems, because different companies may use different operation systems. To work in these different companies, we should be familiar with these system. It is much work to download these different files, but sometimes we can learn what it is and how to use it from downloading these files. It is also important for a good IT auditing to use these different types of operation systems, because we need to control the risk for different system in the future. Therefore, it is good to learn more and know more.
Chenhui Lai says
As an IT auditor, you need to know how to use multiple virtual machines for different operating systems. Because different companies will have different operating systems that can be familiar with the use of different types of operating systems and virtual machines, which can help IT auditors control risk and find the error. There is nothing wrong with getting new things.
Dongjie Wang says
In my opinion, knowing how to install and use virtual machines for different operating systems is extremely useful for our future career, Different organizations are using different operating systems in the real life. Therefore, being prepared for knowing both Window and Linux can help us better adapt the technology environment in the company. Azure is popular virtual machine software now but is cloud-based. It is easier to install because files are built-in and we don’t need to download. However, Azure is much more expensive than VMWare,
Karabo Ntokwane says
Different companies use different operating systems; therefore, it is important as an auditor to be prepared to work on all platforms the client side as well as the server side. Some organizations use cloud based and some still use the traditional systems. As an auditor, I might work on a consulting company which means I will get to work on different environments all the time.
When auditing operating systems, you need to a thorough analysis of the entire system. What OS is running, which firewall is running, check antiviruses, check startup process that are running, and a lot more. You can’t not do all these if you do not know how to navigate around the system. An auditor checks if everything is complying to company policies, regulations and best practices. A recommendation of which controls to implement can only be done if you know what you are looking at. All the activities we are doing in class are very vital.
Patrick J. Wasson says
Exactly! Good point!
Vittorio Christian DiPentino says
I think you are asking us to download multiple VM’s so we have an understanding of how various things accomplish the same goal. It also, and more importantly, helps us understand how to use software and processes that were uncomfortable with and have little knowledge about. As far as the different operating systems, I believe It is to show us diverse types of OS so we can grow accustomed to looking into systems we are unfamiliar with. For these reasons I believe it will make me a better IT auditor.
Ruby(Qianru) Yang says
The process of actually installing virtual machine helps me deeply understand what virtual machine is. From class I known that the desire to run multiple operating systems was the initial motive for virtual machines, which allows time-sharing among several single-tasking operating systems. I downloaded VMware to my computer and followed the challenge instructions to install different operating systems, such as windows 2012 and Linux. Of course I failed in the beginning, because I didn’t know I need download the system server. After figured out the correct process, I successfully had three different operating system running at same time. I think this hands-on project is really helpful. Virtual server of IT systems has many advantages, such as improving IT service agility, reduces the infrastructure cost by decreasing number of physical servers. This is a trend virtual server will become more and more popular in companies. As an IT auditor, known virtual machine technology and the risks with it will be an advantage. To perform a successful audit of a virtual IT system, I need understand of the Virtual machine infrastructure, access points, used and unused ports, and server partitions. Looking forward have more challenges about virtual machine through this class!
Haitao Huang says
Q1.
Enterprises use different types of operating systems or different hosting platforms, therefore IT auditors need to be prepared for auditing different operating systems and application running on various platforms. Installing different operating systems on different VM platforms gives me opportunities to explore, compare, and understand different OS simultaneously without damaging the original system. Using VMware and Azure is a great chance to get familiar with both local-based and cloud-based VM platforms, which could be very helpful in preparation of auditing different systems.
Q2.
It is a fact that many enterprises today are using both local-based and cloud based hosting services, therefore it is important to understand how they work and differences between them.
Q3.
I think configuring 3 different types of operating systems will help me become a better IT auditor. Each company uses different operating systems for different purpose; a company may use different systems across it departments. It is necessary for an IT auditor to obtain fundamental understating of each system in order to conduct effective audits.
Linlan Chen says
The purpose of installing multiple virtual machines help me better understand what virtual machine is. As an IT Auditing student, It is good opportunity to understand how to operate the Virtual machines. and as we know different organization used different system. understand Virtual machines with two types of operation system can help us deal with many situation in future.
Raisa Ahmed says
In Week 2, we spent time building personal computers to familiarize ourselves of the components needed to make the machine. We also spent time discussing the importance of each component. WHY? Because it enables us to understand what we are working with. In doing so, will also help us better communicate thoroughly with others in the field. Similarly, during Week 3, we were installing multiple virtual machines with different operating systems to familiarize ourselves of the various operating systems that companies use today. Given that we live in a society where technology is always changing, it is necessary for us to be able to learn and adapt to these changes and know how to use it. As future IT Auditors, we are obviously going to be working in companies that use various different kinds of operating systems, local, cloud based, or both. Therefore, in order to complete our tasks efficiently and effectively, we have to know how to navigate through the different kinds of technologies we may come across in the field.
Rouying Tang says
The reason we use two types of virtual machines hosting technology to install multiple virtual machines with different operating systems is 1, to be familiar with different interface of virtual machines. 2, be familiar with different operating systems, especially for the Linux. We can use MS Azure but that can be limited by the access of internet, speed and the safety. So the local based is also necessary.
I agree with the ideal that configuring 3 types of operating systems will help for being an good IT auditors, because we need to be familiar with the common operating systems used by our customers to provide the necessary services.
Yijiang Li says
VMware Workstation and Microsoft Azure are two different types of software based on virtual machine, and VMware is local based but Azure is cloud based. Therefore, learning two kinds of virtual machine software will help us understand some major differences and strength and weakness of them.
For example, we will learn how to download an installation file of an operating system and how many different formats it has when we are using VMware. Next, installing an operating system step by step through a ISO file would be interesting and challenging for us. However, if we use Azure only, most steps of these installation process will be handled automatically, so we would lose a good opportunity to practice ourselves.
For those 3 different types of operating systems, initially, we will understand the major difference between open source and closed source platform by comparing Linux and Windows. Second, comparing Windows Server 2008 and 2012 will provide us some ideas about why people upgrade an operating system and which new functions and characteristics has been added to a new operating system. Learning these skills will definitely help us become a better IT auditor.
Zhixin Wei says
First, installing virtual machine helps us understand what virtual machine is. Second, the operating system sits on top of a physical system and talks to the hardware. This insulates application software from many hardware implementation details. As a IT auditor, we should know well about the differences and strength and weakness of them.
Zhixin Wei says
First, installing virtual machine helps us understand what virtual machine i. Second, First, the operating system sits on top of a physical system and talks to the hardware. This insulates application software from many hardware implementation details. As an IT auditor, we should know well about the differences of the operation systems.
Tamekia P. says
You asked us to do multiple virtual machines utilizing both the cloud and VMware to allow us to experience both. By using multiple O/S, we could compare and contrast the difference. It could help us in the future as auditors because will have some frame of reference. I know that I was more comfortable with the O/S that I encountered before so it was nice to gain experience elsewhere.
Tamekia P. says
The point of using the different virtual hosting technology was to get an appreciation for both. Cloud computing is still an emerging technology so it was beneficial to get experience using it. VMWare is tried and true so it made sense to gain experience using method that is more likely to be used by organizations.
Utilizing the different operating software so to enhance experience with the O/S that we may encounter.
Marsha Billups says
I’m not sure that I agree that knowing how to configure 3 different types of VMs will help me as an It Auditor. It definitely won’t hurt, however, as long as I’m well versed in the various Operating Systems, their set up and capabilities, I could be just as prepared.
As an IT Auditor the bottom line is -I will need to know how to access and must understand how the Operating system is set and the services provided.
Marsha Billups says
I think it’ll help me as an IT Auditor as I now can better perform an audit these three types of Operating Systems and now know where to look to understand exactly how the OS is set up and what it’s set up to do.
Yingyan Wang says
Installing different virtual machines with different operating system is very useful for me. I don’t have any IT background and never tried to install virtual machines before. It really taught me a lot. And as an IT auditor in the future, we may face different virtual machines and operating system in different companies, so knowing about different things help us prepare the future challenge. MS Azure is convenient to download any operating system which is built-in, but it costs more. And VMware is another common virtual machine widely used and it is a leading company in this field. So knowing both of them is helpful for us to explore more different knowledge.