Computing · Year 11

Active learning ideas

Network Security Fundamentals

Network security concepts stick best when students manipulate the technology themselves rather than passively read about it. These activities let students feel how firewalls sift packets, see encryption keys in motion, and wrestle with real password choices, which builds durable understanding beyond textbook definitions.

• National Curriculum Attainment Targets
• GCSE: Computing - Cyber Security
• GCSE: Computing - Network Security

• 30–45 min
• Pairs → Whole Class
• 4 activities

Activity 01

• Role Play
• 45 min · Small Groups

Simulation Lab: Firewall Decision-Making

Provide students with scenario cards describing network traffic packets and firewall rule sets. In small groups, they sort packets into allow/block piles, then justify decisions to the class. Extend by adding hacker attack cards to test rules.

Explain how a firewall protects a network from unauthorized access.

Facilitation Tip

During the Firewall Decision-Making lab, circulate to listen for students’ rule phrasing and redirect vague statements like 'block bad guys' into concrete traffic types and port numbers.

What to look for

Provide students with three scenarios: 1) A home user wants to protect their personal computer from internet threats. 2) Two businesses need to securely exchange sensitive financial data. 3) A user needs to log into their online bank account. Ask students to identify which security concept (firewall, symmetric encryption, asymmetric encryption, MFA) is most crucial for each scenario and briefly explain why.

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Activity 02

• Role Play
• 35 min · Pairs

Encryption Challenge: Key Relay

Pairs create symmetric messages using a shared substitution cipher, then switch to asymmetric by passing public keys for decoding. Groups compete to encrypt/decrypt classmate messages fastest while noting method strengths. Debrief differences in security.

Compare symmetric and asymmetric encryption methods for securing data in transit.

Facilitation Tip

In the Encryption Challenge relay, pause pairs who finish early to ask them to predict what happens if their shared key is intercepted mid-relay.

What to look for

Pose the question: 'Imagine you are designing the security for a new online gaming platform. What are the top three security measures you would implement, and why are they essential for protecting both the platform and its users?' Facilitate a class discussion where students share and justify their choices, referencing concepts like firewalls, encryption, and access control.

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Activity 03

• Role Play
• 40 min · Individual

Password Strength Tournament

Individuals generate passwords and test them against cracking tools or checklists for length, variety, and uniqueness. Pairs then pitch multi-factor setups for scenarios like school logins. Class votes on strongest defenses.

Justify the importance of strong passwords and multi-factor authentication in network security.

Facilitation Tip

Run the Password Strength Tournament with a visible timer so students feel urgency and witness firsthand how quickly weak passwords fall to brute-force tools.

What to look for

Present students with a short list of common network security threats (e.g., phishing, malware, unauthorized access, man-in-the-middle attacks). Ask them to match each threat with the primary security measure (firewall, encryption, strong passwords, MFA) that helps mitigate it. Review answers as a class, clarifying any misconceptions.

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

Activity 04

• Role Play
• 30 min · Small Groups

Access Control Role-Play

Small groups act as network admins facing access requests from 'users' with varying credentials. They grant/deny based on policies, incorporating MFA checks. Rotate roles and discuss failures post-scene.

Explain how a firewall protects a network from unauthorized access.

Facilitation Tip

During Access Control Role-Play, assign one student to play the attacker to force defenders to justify every access decision out loud.

What to look for

Provide students with three scenarios: 1) A home user wants to protect their personal computer from internet threats. 2) Two businesses need to securely exchange sensitive financial data. 3) A user needs to log into their online bank account. Ask students to identify which security concept (firewall, symmetric encryption, asymmetric encryption, MFA) is most crucial for each scenario and briefly explain why.

• Apply
• Analyze
• Evaluate
• Social Awareness
• Self-Awareness

A few notes on teaching this unit

Start with a five-minute demo of a live firewall log showing allowed and blocked traffic so students see rules in action. Then move to peer teaching: stronger students model encryption steps for those still forming the concept. Avoid the trap of lecturing on theory first; let the simulation reveal gaps, then address them with targeted mini-lessons. Research shows hands-on timing beats theory alone for retention in cybersecurity topics.

Successful learning shows when students explain why simple rules block complex threats, choose the right encryption type for a task, and combine password strength with multi-factor steps without being prompted. Their reasoning should cite risks like phishing and data leaks automatically.

---

Watch Out for These Misconceptions

• During the Simulation Lab: Firewall Decision-Making, watch for students who claim firewalls block all external traffic completely.

  During the Simulation Lab: Firewall Decision-Making, hand each group a printed firewall rule set and ask them to categorize each rule as 'allow,' 'deny,' or 'log' so they see selective filtering in action.

• During the Encryption Challenge: Key Relay, watch for students who believe symmetric and asymmetric encryption work the same way.

  During the Encryption Challenge: Key Relay, have pairs swap roles halfway through and compare decryption speeds, noting why symmetric is faster but asymmetric secures the initial key exchange.

• During the Password Strength Tournament, watch for students who assume a long password alone guarantees security.

  During the Password Strength Tournament, reveal the top passwords and ask the class to score them on length, complexity, and resistance to dictionary attacks, then revise them together.

---

Methods used in this brief

• Role Play