AP Networking Unit 4: Managing Our Global Connections
AP Networking Unit 4: Managing Our Global Connections
Unit 3 had you design and build a network from a blank floor plan. Unit 4 plugs that network into the rest of the world. You are the IT support intern at a local grocery store whose managed network reaches the internet, and across six topics you learn the protocols and layer models that make that reach possible, the CLI and routing tools that let you see it, and the monitoring and defenses that keep one bad Saturday from becoming a security incident.
The scale-up changes the evidence one more time. Unit 3 gave you artifacts you wrote yourself: your address tables, your firewall rules. Unit 4 gives you professional artifacts produced by systems you do not control: OSI and TCP/IP layer stacks, CLI output, routing tables with metrics, traceroute hops, and IDS and IPS alert lines. Reading them is the capstone skill, because faults now start outside your building as often as inside it. Each topic below has a free, in-depth study guide, an interactive practice activity, and a quiz.
You are the IT support intern at a local grocery store, keeping a larger, managed, internet-connected network reliable and secure. On a busy Saturday things go wrong at once: shelf prices display incorrectly, the inventory system reports stock you can see on the shelves as missing, and payment processing turns unreliable. The manager fears a security incident touching confidentiality, integrity, or availability. Across the unit you triage that evidence, trace it through protocols, layers, and routes, defend the network from the inside out, and plan the upgrades that keep the store growing.
The six topics
4.1 What Happens When Networks Break or Fail?
Skills: Secure, Troubleshoot
Read the Saturday evidence, wrong prices, missing inventory, card reader timeouts, and classify each as compromised confidentiality, integrity, or availability, then explain what unreliable connectivity actually costs an organization.
4.2 The Language of the Network: Protocols and the OSI and TCP/IP Models
Skills: Connect and Configure, Troubleshoot
What common protocols like HTTP, DNS, DHCP, TCP, and IP each do, how the OSI and TCP/IP models organize them into layers, and how to use the models to pick which layer to investigate first.
4.3 Tools of Network Analysts: Using the CLI
Skills: Connect and Configure, Troubleshoot
Navigate a computer system from the command line, list, create, and move files with the right command for the task, and transfer files securely between machines with scp and sftp.
4.4 How Data Travel the Internet: Routing, Metrics, and Paths
Skills: Connect and Configure, Troubleshoot
How data travel between different networks, how routing protocols and metrics decide the path a packet takes, and how to read routing tables and traceroute output to determine, or question, that path.
4.5 From the Inside Out: Monitoring and Defending a Large Network
Skill: Secure
The threats and vulnerabilities a managed network faces, the controls that limit each impact, the IDS and IPS log indicators that suggest an attack in progress, and how to configure a VLAN.
4.6 Moving Forward: Designing for Reliability and Growth
Skill: Connect and Configure
How IPv6 addressing supports modern networks that outgrow IPv4 planning, and which improvement, a redundant link, a UPS, a backup WAN connection, actually addresses a stated failure mode.
How the unit builds
The six topics run in the order an incident unfolds. The stakes come first (4.1): before you can defend a network you have to recognize what a compromise of confidentiality, integrity, or availability looks like in evidence, and what downtime costs the store per hour. Then you learn the shared language that makes everything else discussable: protocols and the OSI and TCP/IP models (4.2), which turn a vague "the network is broken" into "investigate this layer first." With the map in hand you pick up the analyst's tools, working at the CLI to navigate systems and move files securely (4.3), and follow data past your own walls, reading routing tables and traceroute output to see the path packets actually take (4.4). Now you can defend the whole thing: monitor the managed network, read IDS and IPS alerts, and place controls including VLANs (4.5). The unit, and the course, ends looking forward: IPv6 and reliability upgrades that let the network grow instead of merely survive (4.6).
What you will be able to do
- Identify evidence of compromised confidentiality, integrity, or availability, and explain how unreliable connectivity impacts an organization.
- Describe common network protocols and the purpose and organization of the OSI and TCP/IP models, and use the models when troubleshooting.
- Apply CLI commands to navigate computer systems and to transfer files securely.
- Explain how data travel between networks and how routing protocols and metrics influence the path, and determine a path using a routing tool.
- Identify the impacts of threats in a managed network, choose controls that limit them, spot attack indicators in IDS or IPS logs, and explain how to configure a VLAN.
- Explain how IPv6 addresses support modern networks and identify ways to improve reliability and availability.
How to use this unit
Work through the six topics in order; each one assumes the vocabulary of the one before it. The routine is unchanged: read the free study guide, do the interactive practice, then take the topic quiz and review misses against the essential knowledge. Plan on 14 class periods of 45 minutes across the unit: two for 4.1, three each for 4.2, 4.4, and 4.5, one for 4.3, and two for 4.6.
This is the top of the course's difficulty ramp. Unit 3 asked you to combine two signals from artifacts you wrote yourself; Unit 4 asks you to combine three signals from professional artifacts, an IDS alert line plus a traceroute hop plus a symptom on the sales floor, before a cause is visible. Two habits carry the unit. Keep thinking in layers: when the card readers time out, the models tell you whether to suspect a cable, an address, or a service, and that ordering is the whole point of 4.2. And keep verifying before trusting: AI can draft a command or suggest a route, but in this unit you check its output against the artifact, the same with-and-without-AI habit the course has built since Unit 1.
When you finish all six topics, you are ready for the Unit 4 test and performance task, and you have completed all four units. Head back to the AP Networking course guide to review the full course map and the exam format.
Frequently asked questions
What does AP Networking Unit 4 cover?
Unit 4, Managing Our Global Connections, covers scaling from a LAN to WANs and the internet across six topics: evidence of network failure and the CIA triad, protocols and the OSI and TCP/IP models, CLI commands, routing and data paths, monitoring and defending a managed network, and designing for reliability and growth with IPv6.
How many topics are in Unit 4?
Six topics (4.1 through 4.6), each with a free study guide, interactive practice, and a quiz. Suggested pacing is 14 class periods of 45 minutes. It is the final unit of the AP Networking course.
What is the difference between the OSI and TCP/IP models?
Both divide networking into layers so problems can be located and discussed precisely. The OSI model uses seven layers and is the more detailed reference vocabulary; the TCP/IP model uses four and matches how the internet's protocols are actually built. In this unit you use both to decide which layer to investigate first when something breaks.
What is the Unit 4 performance task?
Using the scenario Grocery Store Downtime, you triage a busy-Saturday incident: classify the evidence against confidentiality, integrity, and availability, trace the fault using layer models, CLI tools, and routing output, recommend the controls that contain it, and propose the reliability upgrades that prevent a repeat.
Do I need to finish Unit 3 first?
Yes, ideally. Unit 4 assumes the segmentation, firewall, and documentation skills from Unit 3 and extends them past your own building, so you should be comfortable reading an address table and a firewall rule set before adding routing tables and IDS logs on top.
AP is a trademark of the College Board, which was not involved in the production of, and does not endorse, this resource.
Get in Touch
Whether you're a student, parent, or teacher — I'd love to hear from you.
Just want free AP CS resources?
Enter your email below and check the subscribe box — no message needed. Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.
Message Sent!
Thanks for reaching out. I'll get back to you within 24 hours.
Prefer email? Reach me directly at [email protected]