Foundations
Final Assessment Review
Questions & Solutions
2025
©2025
, Question 1 (Multiple Choice)
Case Study:
A multinational enterprise has adopted a layered security strategy. Their
network policy involves distinct responsibilities at various OSI layers.
Consider a scenario where two applications need to coordinate during a
secure transfer.
Question:
Which OSI layer is primarily responsible for establishing and managing
the session between these applications?
a) Transport Layer
b) Session Layer
c) Application Layer
d) Presentation Layer
Correct ANS: b) Session Layer
Rationale:
The Session layer (Layer 5) is designed to establish, manage, and
terminate sessions between applications. It synchronizes data exchange
and provides dialog control, making it essential for multi-application
coordination in secure communications.
---
Question 2 (Fill in the Blank)
Case Study:
During a security briefing, a cybersecurity analyst explains how data
confidentiality is maintained in transit within a private organization.
©2025
, Question:
______ encryption employs the use of a single secret key for both
encryption and decryption.
Correct ANS: Symmetric
Rationale:
Symmetric encryption uses one key for encrypting and decrypting data.
While highly efficient, the challenge lies in secure key distribution,
especially in large environments.
---
Question 3 (True/False)
Case Study:
An IT professional is evaluating firewall capabilities for an organization’s
new network design.
Question:
True or False: A firewall inspects packets at the physical layer (Layer 1) of
the OSI model.
Correct ANS: False
Rationale:
Firewalls typically operate at higher layers (such as the network,
transport, and application layers) rather than the physical layer. They
focus on packet filtering and deep packet inspection based on protocol
and application data.
---
Question 4 (Multiple Response)
©2025