IBDP Computer Science A2.4 Network security HL Paper 1 - New Syllabus
▶️ Answer/Explanation
(a)
Any $3$ appropriate hardware components of a WLAN may be identified. For example:
• Wireless access point (WAP/AP): allows wireless devices to connect to the network.
• Wireless router: routes data between devices and other networks, such as the internet.
• Wireless network interface card (NIC): enables a computer or other device to communicate wirelessly.
Other acceptable examples include wireless antennas, wireless bridges/repeaters, wireless controllers and network switches.
Answer: Wireless access point, wireless router and wireless NIC.
(b)
Two advantages include:
• Mobility and flexibility: Employees can move around the office with laptops or mobile devices while remaining connected to the network. They are not restricted to locations where network cables are installed.
• Easier and potentially cheaper installation or expansion: Fewer physical cables need to be installed, and additional users or devices can usually be added without installing new network cabling.
Other valid advantages include improved collaboration, easier scalability, simpler office layouts and increased availability of network access.
Answer: A WLAN provides greater mobility and makes the network easier to install, expand and reorganize.
(c)
Two ways of reducing unauthorized interception are:
• Use strong wireless encryption: Modern encryption protocols such as $\text{WPA2}$ or $\text{WPA3}$ encrypt transmitted data. If wireless traffic is intercepted, the attacker should not be able to understand the data without the correct encryption key.
• Use strong authentication: Users should be required to authenticate using secure passwords, multi-factor authentication or other approved credentials. This helps prevent unauthorized users from connecting to the WLAN.
Other acceptable security measures include filtering permitted devices, using firewalls, keeping firmware and software updated, network segmentation and using a VPN.
Answer: Use strong encryption and secure authentication to reduce the risk of intercepted data being read or accessed by unauthorized users.
(d)
A virtual private network (VPN) creates a secure connection between an employee’s device and the organization’s network across the internet.
• The employee must normally authenticate before the VPN connection is established, helping ensure that only authorized users gain access.
• The VPN creates an encrypted tunnel through which data travels. If the traffic is intercepted while crossing a public network, the encrypted contents should not be readable by the interceptor.
• Once connected, the employee can securely access organizational resources such as files, applications and other internal network services, giving them functionality similar to being connected directly to the organization’s network.
Answer: A VPN authenticates the remote employee and establishes an encrypted tunnel between the employee’s device and the organization’s network, providing secure remote access to internal files, applications and network services.
▶️ Answer/Explanation
One reason for using a VPN is to provide a secure and private connection when communicating over a network.
A VPN can encrypt data transmitted between the user and the VPN server. This helps prevent attackers from intercepting and reading sensitive information, particularly when using an insecure public Wi-Fi network.
A VPN can also create a secure tunnel through which network traffic is transmitted, providing greater privacy and protection from interception.
Answer: A VPN may be used to secure communications because it can encrypt data and create a secure tunnel, reducing the risk of sensitive information being intercepted.