Unit 2: A2 Networks
Topic 2.4: Network security Questions
Practice 20 exam-style questions for IB Computer Science Topic 2.4. Review the question stems below, then unlock the full Question Bank to access markschemes, model answers, and AI grading.
2Outline2 marks
2023
Outline how encryption protects the e-mails a law firm sends to clients.
Markscheme and model answer locked
Unlock Question3Describe3 marks
2026
Describe how a packet-filtering firewall decides what to do with a packet.
Markscheme and model answer locked
Unlock Question4Explain3 marks
2026
Explain why the order of firewall rules matters.
Markscheme and model answer locked
Unlock Question5Explain3 marks
2026
A law firm sends draft contracts to clients by email. Explain why these emails should be encrypted.
Markscheme and model answer locked
Unlock Question6Explain3 marks
2026
Explain why a stateful firewall can be more restrictive than a packet filter without blocking legitimate traffic.
Markscheme and model answer locked
Unlock Question7Outline2 marks
2026
Outline what is meant by a default-deny policy.
Markscheme and model answer locked
Unlock Question8Explain3 marks
2026
Explain why default-deny is safer than default-allow.
Markscheme and model answer locked
Unlock Question9Explain4 marks
2026
Explain why a firewall alone cannot protect a network.
Markscheme and model answer locked
Unlock Question10Suggest4 marks
2026
Suggest two other measures that should accompany a firewall.
Markscheme and model answer locked
Unlock Question11Describe3 marks
2026
Describe what a proxy server does.
Markscheme and model answer locked
Unlock Question12State1 mark
2026
State two things a firewall rule can be based on.
Markscheme and model answer locked
Unlock Question13Suggest3 marks
2026
Suggest one privacy concern raised by a proxy server.
Markscheme and model answer locked
Unlock Question14Outline2 marks
2026
Outline what is meant by a demilitarised zone in network design.
Markscheme and model answer locked
Unlock Question15Explain3 marks
2026
Explain why a public web server is placed in a DMZ rather than on the internal network.
Markscheme and model answer locked
Unlock Question16Determine3 marks
2026
Determine whether a firewall rule permitting inbound traffic to port 443 allows a student to run a web server on a school laptop, and justify your answer.
Markscheme and model answer locked
Unlock Question17Determine2 marks
2026
Determine the effect of a rule list in which 'permit all outbound' appears above 'block outbound to social media'.
Markscheme and model answer locked
Unlock Question18Suggest3 marks
2026
Suggest why a firewall is also placed on each individual computer, not only at the network boundary.
Markscheme and model answer locked
Unlock Question20Distinguish1 mark
2026
Distinguish between plaintext and ciphertext.
Markscheme and model answer locked
Unlock QuestionReady to practice Topic 2.4?
Get instant AI feedback on your answers, view detailed markschemes, and track your progress across all IB Computer Science topics.
Start Practising Now