Unit 3: Securing Networks
Cybersecurity · Unit 3 · Paper 2

Securing Networks unit test

A test on this unit alone, marked as a percentage and a letter grade — for the test your class is actually sitting, rather than for May. Answer everything, then submit once: seeing the answer to question 3 before attempting question 4 makes the final percentage meaningless.

Paper 1Paper 2Paper 3
Each paper is built from this unit’s 40 terms and is the same for everyone, so a teacher can assign “Unit 3, Paper 2” and every student sits the identical test. Multiple choice is marked objectively; the written sections you mark yourself against the model answer and rubric.
Suggested time 33 min 30 points0/17 attempted
1

Network segmentation

2

Lateral movement

3

Next-generation firewall

4

DNS poisoning

5

False positive vs false negative

6

WEP

7

SSID broadcast

8

On-path (man-in-the-middle) attack

9

802.1X

10

IDS vs IPS

11

Botnet

12

WPA3

Short answer 1. Define or explain: SIEM

3 pts

Short answer 2. Define or explain: Signature-based vs anomaly-based detection

3 pts

Short answer 3. Define or explain: ARP poisoning

3 pts

Short answer 4. Define or explain: WPA2

3 pts

Free response

6 pts

This course has no free-response prompt tagged to this unit, so one from elsewhere in the course is used. It is still worth writing — the skill transfers.

A school district discovers that a staff workstation is beaconing to an unfamiliar external address, and that the account signed in on it has just accessed an unusual number of student records. (a) Identify the first containment action the response team should take, and explain why it comes before eradication. (b) Explain why the team should preserve volatile evidence before rebuilding the machine, and give one example of evidence that would be lost by an immediate reboot. (c) The account belonged to a librarian who did not need access to student records at all. Name the security principle that was violated and explain how applying it would have limited the damage. (d) Describe one detective control and one preventive control the district should add, and state clearly which is which.