Unit 2: A2 Networks
Topic 2.4: Network security Questions
Practice 20 exam-style questions for IB Computer Science Topic 2.4. Review the question stems below, then unlock the full Question Bank to access markschemes, model answers, and AI grading.
1State1 mark
2026
State two things a firewall rule can be based on.
Markscheme and model answer locked
Unlock Question2Describe3 marks
2026
Describe how a packet-filtering firewall decides what to do with a packet.
Markscheme and model answer locked
Unlock Question3Explain3 marks
2026
Explain why the order of firewall rules matters.
Markscheme and model answer locked
Unlock Question4Distinguish4 marks
2026
Distinguish between a packet-filtering firewall and a stateful firewall.
Markscheme and model answer locked
Unlock Question5Explain3 marks
2026
Explain why a stateful firewall can be more restrictive than a packet filter without blocking legitimate traffic.
Markscheme and model answer locked
Unlock Question6Outline2 marks
2026
Outline what is meant by a default-deny policy.
Markscheme and model answer locked
Unlock Question7Explain3 marks
2026
Explain why default-deny is safer than default-allow.
Markscheme and model answer locked
Unlock Question8Explain4 marks
2026
Explain why a firewall alone cannot protect a network.
Markscheme and model answer locked
Unlock Question9Suggest4 marks
2026
Suggest two other measures that should accompany a firewall.
Markscheme and model answer locked
Unlock Question10Describe3 marks
2026
Describe what a proxy server does.
Markscheme and model answer locked
Unlock Question11Explain4 marks
2026
Explain two benefits to a school of routing web traffic through a proxy.
Markscheme and model answer locked
Unlock Question12Suggest3 marks
2026
Suggest one privacy concern raised by a proxy server.
Markscheme and model answer locked
Unlock Question13Outline2 marks
2026
Outline what is meant by a demilitarised zone in network design.
Markscheme and model answer locked
Unlock Question14Explain3 marks
2026
Explain why a public web server is placed in a DMZ rather than on the internal network.
Markscheme and model answer locked
Unlock Question15Determine3 marks
2026
Determine whether a firewall rule permitting inbound traffic to port 443 allows a student to run a web server on a school laptop, and justify your answer.
Markscheme and model answer locked
Unlock Question16Determine2 marks
2026
Determine the effect of a rule list in which 'permit all outbound' appears above 'block outbound to social media'.
Markscheme and model answer locked
Unlock Question17Suggest3 marks
2026
Suggest why a firewall is also placed on each individual computer, not only at the network boundary.
Markscheme and model answer locked
Unlock Question19Distinguish1 mark
2026
Distinguish between plaintext and ciphertext.
Markscheme and model answer locked
Unlock QuestionReady to practice Topic 2.4?
Get instant AI feedback on your answers, view detailed markschemes, and track your progress across all IB Computer Science topics.
Start Practising Now