Community resourceWorksheet

J277 1.4 Network security consolidation

Part 3 of 3 · J277 1.4 · Network security

Independent network-security practice based on a school music club and its booking service.

Students will:

  • identify specified attacks without a word bank
  • explain account and malware risks
  • apply testing, permissions and encryption
  • recognise a control's limitations
  • compare two security proposals and justify a priority

Inside: 4 text sections, 1 multiple-choice activity, 2 completion activities, 7 written answers. 25 marks. Suggested teaching time: 45–65 minutes.

Includes a teacher guide with suggested sections, timings and common misconceptions.

Series: J277 1.4 · Network security, part 3 of 3.

Shared by Coding PathwayVerified teacher

  • 14 cells
  • About 60 minutes
  • CC BY-SA 4.0
  • Shared 17 Aug 2026
  • Updated 27 Oct 2026

Preview

The whole resource, exactly as a class sees it. Answers and marking are held back.

Network security: consolidation

A school music club uses an online booking service, shared laptops and a staff server. Answer independently. Explain the action and its effect when a question asks how a threat or control works.

Fill in the blanks3 marks
Name the attack in each case. (a) A fake administrator message asks a student to reveal login details: Answer 1. (b) A program systematically tries many possible account passwords: Answer 2. (c) An attacker floods the booking service with requests: Answer 3.
Written answer3 marks

A fake message asks a club member to sign in through a link. Explain how this could let an attacker use the member's booking account.

Students type their answer here.

Written answer3 marks

A shared club laptop has downloaded a malicious program that could damage rehearsal files. Recommend one control and describe how it could stop the program causing further damage.

Students type their answer here.

Fill in the blanks2 marks
Name the attack in each case. (a) Input on the booking form is treated as a malicious database command: Answer 1. (b) Someone secretly captures confidential network data while it travels: Answer 2.

Protect the club's systems

Written answer3 marks

The club arranges penetration testing before its replacement booking website launches. Explain how this could reduce a security risk.

Students type their answer here.

Written answer2 marks

Club members can currently open private payment files on the staff server. Explain how user access levels could reduce this risk while keeping the booking service available.

Students type their answer here.

Written answer2 marks

The club sends confidential payment records over a network. Explain how encryption helps if those records are intercepted.

Students type their answer here.

Written answer2 marks

A club organiser says, 'Our firewall makes every downloaded file safe.' Explain why this claim is unreliable.

Students type their answer here.

Multiple choice1 mark

Which measure most directly restricts unauthorised access to a backup drive kept in the club's equipment cupboard?

  • ACompress its files
  • BGive the cupboard a longer name
  • CKeep the cupboard locked and control who has a key
  • DIncrease the server's bandwidth

Make a justified choice

Written answer4 marks

The club has an untested booking website and an equipment cupboard whose key is shared widely. It can initially fund either penetration testing or better physical access control. Compare the two proposals and recommend which should be funded first.

Students type their answer here.

Review

After feedback, improve one answer by making its security action and consequence more precise.