D329 ITEC 2112 Network & Security
Applications
Final Assessment Review
(Questions & Solutions)
2025
©2025
, 1. Case Study – Secure Web Service Design
A financial institution is developing an online banking portal and must
guarantee that all user data transmitted between clients and servers is
confidential and tamper‑proof.
Question: Which technology is most critical to ensure secure
application-layer communication?
A. HTTP
B. SSL/TLS
C. FTP
D. DHCP
ANS: B. SSL/TLS
Rationale: SSL/TLS protocols encrypt data transmitted at the
application layer, ensuring confidentiality and integrity for sensitive data
in web services.
---
2. Case Study – Web Application Firewall (WAF)
A healthcare provider deploys a new web application to manage patient
records. To protect against injection attacks and cross-site scripting,
security engineers recommend a solution that filters HTTP requests.
Question: Which application-layer technology should be implemented
to secure the application?
A. IDS/IPS
B. RESTful API
C. Web Application Firewall (WAF)
D. VPN
ANS: C. Web Application Firewall (WAF)
Rationale: A WAF inspects incoming HTTP requests to detect and block
malicious payloads such as SQL injection and XSS, protecting web
applications at the application layer.
---
©2025
, 3. Case Study – API Security
A company exposes its services through public RESTful APIs. Recent
security assessments reveal potential threats from unauthorized access.
Question: Which of the following methods is most effective in securing
these APIs?
A. Open access endpoints
B. Using API keys in combination with OAuth2
C. Encrypting static files
D. Relying solely on firewall rules
ANS: B. Using API keys in combination with OAuth2
Rationale: API keys along with OAuth2 provide robust authentication
and authorization, ensuring that only authenticated clients can access
sensitive API resources.
---
4. Case Study – PKI and Certificate Management
A network engineering team is implementing a secure email system and
needs to ensure that messages are encrypted and authenticated.
Question: What infrastructure is essential for issuing and managing
digital certificates that enable these functions?
A. DNS Server
B. Directory Services
C. Public Key Infrastructure (PKI)
D. RADIUS
ANS: C. Public Key Infrastructure (PKI)
Rationale: PKI supports the issuance, revocation, and management of
digital certificates, which are fundamental for encryption, digital
signatures, and authentication in secure communications.
---
5. Case Study – Application-Layer DDoS Mitigation
An online retail website is targeted by a Distributed Denial-of-Service
©2025
Applications
Final Assessment Review
(Questions & Solutions)
2025
©2025
, 1. Case Study – Secure Web Service Design
A financial institution is developing an online banking portal and must
guarantee that all user data transmitted between clients and servers is
confidential and tamper‑proof.
Question: Which technology is most critical to ensure secure
application-layer communication?
A. HTTP
B. SSL/TLS
C. FTP
D. DHCP
ANS: B. SSL/TLS
Rationale: SSL/TLS protocols encrypt data transmitted at the
application layer, ensuring confidentiality and integrity for sensitive data
in web services.
---
2. Case Study – Web Application Firewall (WAF)
A healthcare provider deploys a new web application to manage patient
records. To protect against injection attacks and cross-site scripting,
security engineers recommend a solution that filters HTTP requests.
Question: Which application-layer technology should be implemented
to secure the application?
A. IDS/IPS
B. RESTful API
C. Web Application Firewall (WAF)
D. VPN
ANS: C. Web Application Firewall (WAF)
Rationale: A WAF inspects incoming HTTP requests to detect and block
malicious payloads such as SQL injection and XSS, protecting web
applications at the application layer.
---
©2025
, 3. Case Study – API Security
A company exposes its services through public RESTful APIs. Recent
security assessments reveal potential threats from unauthorized access.
Question: Which of the following methods is most effective in securing
these APIs?
A. Open access endpoints
B. Using API keys in combination with OAuth2
C. Encrypting static files
D. Relying solely on firewall rules
ANS: B. Using API keys in combination with OAuth2
Rationale: API keys along with OAuth2 provide robust authentication
and authorization, ensuring that only authenticated clients can access
sensitive API resources.
---
4. Case Study – PKI and Certificate Management
A network engineering team is implementing a secure email system and
needs to ensure that messages are encrypted and authenticated.
Question: What infrastructure is essential for issuing and managing
digital certificates that enable these functions?
A. DNS Server
B. Directory Services
C. Public Key Infrastructure (PKI)
D. RADIUS
ANS: C. Public Key Infrastructure (PKI)
Rationale: PKI supports the issuance, revocation, and management of
digital certificates, which are fundamental for encryption, digital
signatures, and authentication in secure communications.
---
5. Case Study – Application-Layer DDoS Mitigation
An online retail website is targeted by a Distributed Denial-of-Service
©2025
