Community resourceWorksheet

J277 1.4 Network security consolidation

Part 3 of 3 · J277 1.4 · Network security

The consolidation worksheet for OCR J277 1.4, applying threats, vulnerabilities and prevention methods to a single event scenario.

Students will:

  • identify how each specified attack is used and its purpose
  • select a suitable prevention method
  • explain how the method limits the named threat or vulnerability
  • recognise what a control cannot do
  • combine controls into a justified security plan

Inside: 6 explanation cells, 3 multiple-choice questions, 2 fill-in-the-blanks cells and 7 written answers. 40 marks, about 60 minutes.

Series: J277 1.4 · Network security, part 3 of 3.

Shared by Coding PathwayVerified teacher

  • 18 cells
  • About 60 minutes
  • CC BY-SA 4.0
  • Shared 17 Aug 2026
  • Updated 9 Sept 2026

Preview

The whole resource, exactly as a class sees it. Answers and marking are held back.

Network security 3: consolidation and application

This worksheet brings together threats, vulnerabilities and prevention methods from OCR J277 1.4.

You will work with the fictional Night Light Festival, a community arts event that uses online ticketing, staff laptops, public Wi-Fi and a locked equipment room. The context is here to help you apply knowledge: every answer still needs an accurate security mechanism.

By the end, you should be able to:

  • identify how each specified attack is used and its purpose
  • select a suitable prevention method
  • explain how the method limits the named threat or vulnerability
  • recognise what a control cannot do
  • combine controls into a justified security plan

This is consolidation, so the support reduces as you move through the worksheet.

1. The security chain

A threat is something that could cause harm. A vulnerability is a weakness that could be exploited. A control reduces the weakness, limits the attack or reduces its impact.

Threat, vulnerability, control and outcome chain An attacker uses a threat against a vulnerability. A suitable control interrupts the chain and reduces harm. Threatattack method Vulnerabilityweakness exploited Controlinterrupts the chainor reduces impact Reducedharm

The most useful exam explanation follows the chain. For example: A firewall applies rules to network traffic and blocks unauthorised connections, reducing access to the ticket server.

Fill in the blanks5 marks
A label 1 manipulates a person, while a label 2 repeatedly tries possible passwords. A label 3 overwhelms a service so legitimate users cannot reach it. label 4 captures data travelling across a network. label 5 places malicious database instructions into an insecure input.
  • malware
  • SQL injection
  • social engineering
  • encryption
  • data interception
  • brute-force attack
  • denial of service attack
Multiple choice1 mark

A fake festival support message asks a volunteer to enter their password on a copied sign-in page. What form of attack is being used?

  • ASocial engineering through phishing
  • BBrute force
  • CDenial of service
  • DSQL injection
Written answer3 marks

Explain how the fake support message could lead to unauthorised access to the festival system. (3 marks)

Build a chain: method used by the attacker, information obtained, then how it is used.

Students type their answer here.

2. Match a control to the mechanism

OCR can ask both what a control may prevent and how it limits the attack. Naming a control is only the start.

  • Penetration testing is an authorised simulated attack used to find vulnerabilities so they can be fixed.
  • Anti-malware software scans for malicious software and may block, quarantine or delete it.
  • A firewall checks incoming and outgoing traffic against rules.
  • User access levels limit each account to the resources needed for its role.
  • Strong passwords increase the number of possible combinations and make guessing harder.
  • Encryption converts readable plaintext into ciphertext; without the key, intercepted data should not be understandable.
  • Physical security restricts physical access to equipment and storage media.

Do not claim that encryption prevents interception: it protects the meaning of data if interception happens.

Fill in the blanks5 marks
An authorised simulated attack is label 1. Software that scans for malicious files is label 2. A label 3 filters network traffic using rules. label 4 restrict what a signed-in account may view or change. A locked server cabinet is label 5.
  • encryption
  • user access levels
  • firewall
  • physical security
  • password
  • penetration testing
  • anti-malware software
Multiple choice1 mark

Attackers intercept encrypted ticket data. Which statement is accurate?

  • AEncryption means interception was impossible
  • BThe data has been intercepted, but it should not be understandable without the correct key
  • CThe firewall automatically restores the stolen data
  • DThe ciphertext reveals the original data to anyone
Written answer3 marks

The festival stores finance files and volunteer rotas on the same server. Explain how user access levels reduce a vulnerability. (3 marks)

Name the permissions each role needs, then explain the security consequence.

Students type their answer here.

3. Apply controls to incidents

For each incident, ask:

  1. What is the threat or vulnerability?
  2. Which control is directly relevant?
  3. What does that control do?
  4. What harmful result does this reduce?

Several controls may be sensible in real life, but an exam answer should explain the one you choose rather than produce an unexplained list.

Written answer3 marks

A volunteer downloads an infected attachment onto a festival laptop. Recommend one prevention method and explain how it limits this threat. (3 marks)

Choose the method that most directly deals with the problem for malicious software.

Students type their answer here.

Written answer4 marks

The online ticket form accepts unchecked text and sends it directly to a database query. Identify the attack this could enable and explain one way the organisation could find the vulnerability before release. (4 marks)

The required prevention method is one of the seven named by OCR. Explain its purpose and what happens after the test.

Students type their answer here.

Multiple choice1 mark

Which control most directly reduces the risk of somebody stealing the ticket server from the equipment room?

  • AA longer website URL
  • BA larger bandwidth connection
  • CPhysical security such as a locked room
  • DData compression
Written answer4 marks

A manager says, ‘We installed a firewall, so the network is completely secure.’ Evaluate this claim. (4 marks)

Give a useful role for the firewall, then explain two limits or other controls that are still needed.

Students type their answer here.

4. Build a layered plan

The festival is expanding. Staff will sell tickets, performers will upload files, visitors will use a separate public Wi-Fi network, and the equipment room will be unattended overnight.

A high-quality recommendation is selective. It links each control to a different risk and avoids claiming that one method solves everything.

Written answer6 marks

Recommend three security controls for the expanded festival system. For each control, explain the threat or vulnerability it limits and how it does so. (6 marks)

Write three linked control-mechanism-result points. Use different risks from the scenario where possible.

Students type their answer here.

Written answer4 marks

Challenge: The festival can fund either annual penetration testing or a new door-access system first. Decide which should be prioritised. (4 marks)

Compare the different vulnerabilities each option addresses and make a judgement tied to the scenario.

Students type their answer here.

Finish: the precise security sentence

Before submitting, check every longer answer:

  • Have I named the threat or vulnerability?
  • Have I named a relevant control?
  • Have I explained the control's mechanism?
  • Have I linked the result to this scenario?

Security answers become strong when they show the complete chain, not when they contain the longest list of products.