AP Networking: Securing Your Device

Home › AP Networking › AP Networking: Securing Your Device
AP Networking · Pilot Framework V.1 Unit 1 · Topic 1.4

AP Networking: Securing Your Device

Applying protective, detective, deterrent, and recovery controls to build a device security baseline, then verifying it without breaking usability.

Topic 1.4 is the action half of the Secure skill: now that you have identified what could go wrong, you apply controls to protect the device, then verify they work without breaking usability.

Types of Security Controls

Controls are commonly grouped by what they do. Matching the right type to a risk is a frequent exam task.

Control type Purpose Device example
Protective (preventive) Stop harm before it happens A screen lock with strong authentication
Detective Notice harm as or after it happens Security software that flags suspicious activity
Deterrent Discourage an attacker from trying A visible login banner or warning
Recovery Restore after harm has occurred A restored backup of your files

A Baseline of Device Security

Establishing a security baseline means putting a sensible set of controls in place so the device is protected by default.

  • Strong authentication: a screen lock with a strong passphrase or biometric, so a lost device does not become an open door.
  • Keep software updated: updates close known weaknesses; an unpatched device is vulnerable to problems that already have fixes.
  • Use reputable security software: to detect and block malicious programs.
  • Encrypt sensitive data: so that even a stolen device does not reveal its contents.
  • Back up important data: a recovery control that turns a disaster into an inconvenience.
  • Least privilege: run as a standard user, not an administrator, for everyday work, so a mistake or malware has less power.

Defense in depth: layer independent controls so that the failure of one is caught by another. No single control is enough on its own.

Verifying Security Without Breaking Usability

A control that protects the device but makes it unusable has failed at its real job. The Secure skill explicitly includes verifying that a control mitigates the vulnerability while preserving access and availability for legitimate users.

  • Confirm the control actually blocks the threat it targets (test it).
  • Confirm authorized users can still do their work.
  • Document what you applied so it can be reviewed and maintained.

Practice Questions

Which action is a PROTECTIVE control of the device itself rather than the network around it?
  • A. Changing the router's broadcast channel
  • B. Enabling a screen lock with strong authentication
  • C. Upgrading the internet service plan
  • D. Adding a second access point
Answer: B. A screen lock with strong authentication prevents unauthorized device access, a device-level protective control. The other options are network configuration or a service change.
A network administrator wants a control that DETECTS an intrusion in progress rather than only preventing or discouraging one. Which fits?
  • A. A deterrent such as a warning banner
  • B. A detective control such as security monitoring
  • C. A protective control such as a locked door
  • D. A recovery control such as a backup
Answer: B. Detective controls identify activity as or after it happens. Deterrents discourage, protective controls prevent, and recovery controls restore. The question asks specifically about detection.

Frequently Asked Questions

What are the main types of security controls?

Protective (prevent), detective (notice), deterrent (discourage), and recovery (restore). Matching the right type to a risk is a common exam task.

What is a device security baseline?

A sensible default set of controls: strong authentication, current software, security software, encryption, backups, and least-privilege use.

What is defense in depth?

Layering independent controls so the failure of one is caught by another. No single control is sufficient on its own.

Keep Studying

Topic 1.3: Device Security NeedsIdentify threats before securing.Topic 2.6: Securing Your NetworkApply defense at network scale.Network Security FundamentalsCore security concepts for the course.

Practice What You Learned

Test yourself with the full interactive AP Networking practice exam.

Take the Practice Exam Study Guide

Get in Touch

Whether you're a student, parent, or teacher — I'd love to hear from you.

Just want free AP CS resources?

Enter your email below and check the subscribe box — no message needed. Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.

Typically responds within 24 hours
✓

Message Sent!

Thanks for reaching out. I'll get back to you within 24 hours.

🏫 Welcome, fellow educator!

I offer curriculum resources, practice materials, and study guides designed for AP CS teachers. Let me know what you're looking for — whether it's classroom materials, a guest speaker, or Teachers Pay Teachers resources.

✉

Email

[email protected]

📚

Courses

AP CSA, CSP, & Cybersecurity

⏱

Response Time

Within 24 hours

Prefer email? Reach me directly at [email protected]