Physical
- Hardware: cables, connectors, signals
- Security: physical access control
Data Link
- MAC addresses
- Switching, frame transmission
- Security: MAC filtering
Network
- IP addressing, routing
- Devices: routers
- Security: packet filtering
Transport
- End-to-end communication
- Protocols: TCP (reliable), UDP (fast)
- Security: port control
Session
- Maintains communication sessions
- Session establishment/termination
Presentation
- Data formatting, encryption, compression
Application
- User-facing services (HTTP, FTP, email)

Why it matters:
Each layer has different vulnerabilities and controls.

Exam insight:

Lower layers → infrastructure
Higher layers → applications

🔹 TCP/IP Model (Real-World Model)

Simplified networking model used in practice.

Layers:

Network Interface
Internet
Transport
Application

Mapping to OSI:

TCP/IP combines multiple OSI layers

Why it matters:
Real-world protocols operate in this model.

🔹 Network Architecture & Design

Secure architecture is about designing networks that limit risk.

Key Concepts:

Defense in Depth
- Multiple layers of security controls
- If one fails, others protect
Segmentation
- Dividing network into smaller parts
- Limits lateral movement
Isolation
- Separating critical systems completely
Redundancy
- Backup systems to ensure availability

DMZ (Demilitarized Zone)

A separate network segment for public-facing systems
Example: web servers

Purpose:

Protect internal network
If compromised, attacker cannot directly access internal systems

🔹 Network Devices (Detailed)

Firewall

Filters traffic based on rules
Can allow/deny traffic

Router

Directs packets between networks
Uses IP addressing

Switch

Connects devices within a LAN
Uses MAC addresses

IDS (Intrusion Detection System)

Monitors traffic
Alerts on suspicious activity
Does NOT block

IPS (Intrusion Prevention System)

Detects AND blocks threats
Inline with traffic

Proxy

Acts as intermediary
Can filter, log, and anonymize traffic

🔹 Secure Communication Channels

Protects data while in transit.

Key Concepts:

Encryption
- Prevents eavesdropping
Integrity
- Ensures data not modified
Authentication
- Verifies identity

Examples:

HTTPS → secure web
VPN → encrypted tunnel
TLS → encryption protocol

Why it matters:
Data in transit is highly vulnerable.

🔹 Secure vs Insecure Protocols

Insecure:

HTTP
FTP
Telnet

Secure:

HTTPS (HTTP + TLS)
SFTP (SSH File Transfer)
SSH (secure remote login)
IPsec (network-level security)

Exam insight:
Always choose secure protocols.

🔹 Network Attacks (Detailed)

DoS / DDoS

Overloads system with traffic
Causes downtime

Man-in-the-Middle (MITM)

Attacker intercepts communication
Can modify data

Spoofing

Fake identity (IP, MAC, DNS)

Sniffing

Capturing packets from network

Why it matters:
Understanding attacks helps design defenses.

🔹 Segmentation & Isolation

VLANs

Logical network separation

Subnets

IP-based segmentation

Air Gap

Physically isolated system

Why it matters:
Limits attacker movement inside network.

🔹 Wireless Security (Detailed)

Wireless networks use radio signals → easy to intercept.

Risks:

Eavesdropping
Rogue access points
Unauthorized access

Protections:

WPA2 / WPA3 encryption
Strong authentication
Network monitoring

Exam insight:
Wireless = inherently less secure than wired.

🧠 3. Manager Mindset

Protect communication channels
Assume networks are hostile
Segment critical assets
Use layered defenses

👉 Think: How do we reduce exposure and limit attack spread?

❓ 4. Practice Questions

1

How many layers are in the OSI model?
A. 4
B. 5
C. 7
D. 8

2

Which layer handles IP addressing?
A. Data Link
B. Network
C. Transport
D. Session

3

What is the main role of a firewall?
A. Encrypt data
B. Filter traffic
C. Store data
D. Monitor users

4

What is a DMZ used for?
A. Internal storage
B. Public-facing systems
C. Backup
D. Monitoring

5

What does HTTPS protect?
A. Speed
B. Encryption
C. Storage
D. Monitoring

6

What is a VPN?
A. Storage system
B. Encrypted tunnel
C. Monitoring tool
D. Backup system

7

What is a MITM attack?
A. Data deletion
B. Traffic interception
C. System crash
D. Backup failure

8

What is the difference between IDS and IPS?
A. None
B. IDS detects, IPS prevents
C. IDS blocks, IPS logs
D. IDS encrypts, IPS routes

9

What is network segmentation?
A. Connecting networks
B. Dividing networks
C. Encrypting data
D. Monitoring traffic

10

What is VLAN used for?
A. Encryption
B. Logical segmentation
C. Backup
D. Monitoring

11

What is spoofing?
A. Encryption
B. Impersonation
C. Backup
D. Monitoring

12

What is sniffing?
A. Blocking traffic
B. Capturing packets
C. Encrypting data
D. Monitoring users

13

What is the purpose of IPsec?
A. Backup
B. Encryption
C. Monitoring
D. Routing

14

What is the main risk of wireless?
A. Speed
B. Storage
C. Eavesdropping
D. Performance

15

What does WPA3 provide?
A. Backup
B. Wireless security
C. Routing
D. Monitoring

16

What is the role of a router?
A. Encrypt
B. Route traffic
C. Monitor
D. Store

17

What is defense in depth?
A. One control
B. Multiple layers
C. Encryption
D. Monitoring

18

What is the BEST way to secure communication?
A. Backup
B. Encryption
C. Logging
D. Monitoring

19

What is the biggest advantage of segmentation?
A. Speed
B. Cost
C. Limits attack spread
D. Storage

20

What is the main goal of network security?
A. Performance
B. Cost
C. Secure communication
D. Storage

✅ 5. Answers + Reasoning

1

C. 7
The OSI model has seven layers, each responsible for a different part of communication, helping standardize networking.

2

B. Network
The network layer handles IP addressing and routing between networks.

3

B. Filter traffic
Firewalls enforce security policies by allowing or blocking traffic based on rules.

4

B. Public-facing systems
A DMZ isolates external services from internal networks, reducing risk of compromise.

5

B. Encryption
HTTPS uses TLS to encrypt data, protecting it from interception.

6

B. Encrypted tunnel
VPNs secure communication over untrusted networks like the internet.

7

B. Traffic interception
MITM attacks intercept and may alter communication between two parties.

8

B. IDS detects, IPS prevents
IDS alerts, IPS actively blocks threats.

9

B. Dividing networks
Segmentation reduces attack spread and improves security.

10

B. Logical segmentation
VLANs create separate networks without physical separation.

11

B. Impersonation
Spoofing tricks systems by pretending to be a trusted entity.

12

B. Capturing packets
Sniffing captures network traffic for analysis or malicious purposes.

13

B. Encryption
IPsec encrypts and secures IP communications.

14

C. Eavesdropping
Wireless signals can be intercepted easily.

15

B. Wireless security
WPA3 improves encryption and authentication for Wi-Fi.

16

B. Route traffic
Routers direct data between networks.

17

B. Multiple layers
Defense in depth ensures redundancy in protection.

18

B. Encryption
Encryption is the most effective way to secure data in transit.

19

C. Limits attack spread
Segmentation prevents attackers from moving laterally.

20

C. Secure communication
Network security focuses on protecting data as it moves across networks.

⚠️ 6. Exam Traps

Mixing OSI layers
Confusing IDS vs IPS
Forgetting segmentation importance
Choosing monitoring instead of prevention

🔄 7. Flash Review

OSI = 7 layers
Network layer = routing
Firewall filters traffic
VPN = encrypted tunnel
IDS detect / IPS prevent
Segment networks

📊 8. Score

Score: ___ / 20

16–20 → ✅ Strong
10–15 → ⚠️ Review
<10 → ❌ Re-study Domain 4