Loading...
Network security combines controls with different purposes. Explain the threat, the mechanism and its remaining limitations instead of assuming that one product makes a system secure.
What you'll be able to do
A packet-filtering firewall applies rules to properties such as source/destination addresses, ports and protocol. Stateful inspection also considers the state of tracked connections. A proxy can mediate application requests, separating direct communication and applying suitable application-level policy.
A permitted port does not prove all content using it is harmless. Rules can be too broad or incorrectly configured, and encrypted content can limit some inspection. A firewall complements secure application code and access control rather than replacing them.
Symmetric encryption uses a shared secret key for encryption/decryption. Asymmetric systems use related public/private keys for defined operations. Secure protocols can combine asymmetric authentication or key establishment with symmetric protection of bulk data; not every modern exchange literally encrypts a session key with a certificate’s key.
A certificate binds an identity or name to a public key under an issuer’s signature and trust model. A digital signature is created with a private key and verified using the corresponding public key, supporting authenticity and integrity. Verification must include the intended identity and appropriate validity checks; a certificate is not a guarantee that all website claims are honest.
A virus attaches to host material and spreads when that material is executed or used under its mechanism. A worm can propagate between systems without needing the same host-file attachment. A trojan presents a deceptive legitimate appearance while performing unwanted actions. Real attacks can combine mechanisms.
Patching vulnerabilities, validating inputs, controlling privileges, checking software sources, monitoring and maintaining recoverable backups address different risks. Anti-malware tools are useful but cannot prove the absence of every novel threat. Explain which entry point or consequence a control reduces and avoid treating a software label as a full defence.
| Control | Main contribution |
|---|---|
| Firewall rule | Restrict permitted network traffic |
| Encryption | Protect confidentiality in its scope |
| Signature verification | Check integrity/authentic origin under key assumptions |
| Patching | Remove known vulnerable behaviour |
| Backup and recovery | Restore appropriate retained data |
Attempt the task before opening its worked response. Record each change of state, explain the rule used, and check the result against the original requirements. Code examples labelled Python 3 use that language’s conventions; pseudocode states its own assumptions.
Common mistakes to avoid
Key takeaways
Test yourself
Answer a few questions, then review anything you missed.
Start with the quiz above to check the key ideas. You can also choose another topic from the practice library.