4.4b Network Security — Edexcel 1CP2

🔒

Unlock Pro

Subscribe to access all 59 Edexcel 1CP2 lessons.

£7.99/month

or £59/year

⭐ Enrichment lesson — this topic is not assessed in the Edexcel 1CP2 GCSE exam. It provides valuable extra knowledge but should not replace revision of the core specification.

Technical Security Measures

Measure	How it works	What it protects against
Firewall	Monitors and filters incoming/outgoing network traffic based on rules; blocks suspicious packets	Unauthorised access, malware connections, port scanning
Antivirus / Anti-malware	Scans files for known malware signatures; monitors for suspicious behaviour; quarantines threats	Viruses, worms, trojans, ransomware, spyware
Encryption	Transforms data into unreadable ciphertext using an algorithm and key; only decrypted with the correct key	Eavesdropping, data theft in transit or storage
Authentication	Verifies identity before granting access — passwords, biometrics, two-factor authentication (2FA)	Unauthorised access to accounts and systems
Access control	Restricts what different users can see/do — user permissions and roles	Insider threats, accidental data exposure
Penetration testing	Authorised security experts attempt to break into a system to find vulnerabilities before attackers do	Identifies weaknesses proactively
Software updates / patches	Fixes known security vulnerabilities in software and operating systems	Exploitation of known vulnerabilities (e.g. EternalBlue used in WannaCry)
Backups	Regular copies of data stored separately; allows recovery after ransomware or data loss	Ransomware, hardware failure, data loss

Encryption in Detail

Encryption is a fundamental security measure. Data is transformed using an algorithm:

Plaintext → (encrypt with key) → Ciphertext → (decrypt with key) → Plaintext
Symmetric encryption — same key used to encrypt and decrypt (e.g. AES). Fast but key distribution is a challenge
Asymmetric encryption — uses a public key (to encrypt) and a private key (to decrypt). Used in HTTPS/SSL

HTTPS uses asymmetric encryption to set up a secure channel, then switches to symmetric for speed during data transfer.

Two-Factor Authentication (2FA)

2FA (also called MFA — Multi-Factor Authentication) requires two different types of authentication:

Something you know — password, PIN
Something you have — phone (SMS code or authentication app), security key
Something you are — fingerprint, face recognition (biometrics)

Even if a password is stolen via phishing, 2FA prevents unauthorised access because the attacker doesn't have the second factor.

Keeping Software Updated

Software vulnerabilities are constantly being discovered. Manufacturers release patches (software updates) to fix these vulnerabilities. If users don't apply updates, attackers can exploit known vulnerabilities. The WannaCry ransomware exploit (EternalBlue) targeted a Windows vulnerability that had already been patched — organisations that hadn't updated were hit.

Exam tip: For "how can an organisation protect against cyber attacks" questions, use the FAEABSP mnemonic: Firewall, Antivirus, Encryption, Authentication, Backup, Software updates, Penetration testing. Know each one's purpose in 1–2 sentences.

⚠️ Common Mistakes

Saying a firewall stops all attacks — it doesn't stop phishing or social engineering
Confusing encryption with hashing — encryption is reversible (with a key), hashing is one-way
Thinking antivirus alone is sufficient — multiple layers of security (defence in depth) are needed

▶

Video coming soon

Click slide or press arrow keys to navigate

✍️ Worksheet — 4.4b Network Security Measures

8 questions

Q1Explain how a firewall protects a network.[3]

✅ Mark scheme

A firewall monitors all incoming and outgoing network traffic [1]; it applies a set of rules (allow/block) based on IP address, port number, or protocol [1]; it blocks packets that don't match the rules, preventing unauthorised access and malicious connections [1].

Q2Describe what encryption does and explain why it is important for internet security.[4]

✅ Mark scheme

Encryption converts plaintext data into unreadable ciphertext using an algorithm and key [1]; only someone with the correct decryption key can read it [1]; important because data transmitted over the internet can be intercepted by attackers [1]; encryption ensures that even if intercepted, data cannot be read without the key — protecting passwords, banking details, personal messages [1].

Q3Explain what two-factor authentication (2FA) is and how it improves security over a password alone.[4]

✅ Mark scheme

2FA requires two forms of authentication from different categories [1]; e.g. something you know (password) AND something you have (SMS code to your phone) [1]; improves security: even if a password is stolen via phishing, the attacker cannot log in without the second factor [1]; they would need physical access to the victim's phone or biometric data [1].

Q4Why is keeping software and operating systems up to date important for network security?[3]

✅ Mark scheme

Software patches fix known security vulnerabilities [1]; attackers can exploit unpatched vulnerabilities to gain unauthorised access or install malware [1]; example: WannaCry exploited an unpatched Windows vulnerability (EternalBlue) — organisations that had applied the patch were protected [1].

Q5Explain what penetration testing is and why organisations use it.[3]

✅ Mark scheme

Penetration testing (pen testing) is when authorised security professionals attempt to break into an organisation's systems using the same techniques as real attackers [2]; organisations use it to identify security weaknesses and vulnerabilities before malicious hackers can exploit them, allowing them to be fixed proactively [1].

Q6Explain why regular backups are an important security measure, particularly against ransomware.[3]

✅ Mark scheme

Backups create copies of data stored separately from the main system [1]; if ransomware encrypts files, backups allow the organisation to restore their data without paying the ransom [1]; backups should be stored offline or in a separate location so they cannot also be encrypted by ransomware [1].

Q7Describe the difference between symmetric and asymmetric encryption.[4]

✅ Mark scheme

Symmetric encryption uses the same key to both encrypt and decrypt data [1]; it is fast and efficient for large amounts of data but the key must be securely shared [1]; asymmetric encryption uses a pair of keys — a public key (shared with anyone, used to encrypt) and a private key (kept secret, used to decrypt) [1]; used in HTTPS to securely establish a connection before switching to faster symmetric encryption [1].

Q8A company has been the victim of a data breach. Describe THREE security measures they should implement to prevent future attacks.[6]

✅ Mark scheme

Any three measures, two marks each: Firewall — monitors and blocks suspicious network traffic preventing unauthorised external access [2]; Encryption — encrypts sensitive data so even if stolen it cannot be read without the key [2]; 2FA — requires second authentication factor so stolen passwords alone are insufficient for attackers [2]; Software updates — patches known vulnerabilities that attackers exploit [2]; Staff training — educates employees to recognise phishing and social engineering [2]; Access control — limits what each user can access, reducing damage from insider threats or compromised accounts [2].

Topic Quiz

Q 1 of 15

You scored

out of 15

Click to reveal definition

🎉

Session complete!

Term	Definition

Unlock Pro

Technical Security Measures

Encryption in Detail

Two-Factor Authentication (2FA)

Keeping Software Updated

✍️ Worksheet — 4.4b Network Security Measures

Mini Test — Network Security