
Network Security
Network Security Labs
Authorized labs: TCP/IP, discovery, captures, firewalls, VLANs, detection, hardening.
Eight practical Network Security Labs on authorized ranges only: TCP/IP & OSI, scoped host/port discovery, Wireshark/tcpdump analysis, firewall ACL audit, VLAN isolation, LAN attack detection concepts, IDS/IPS triage, and assessment/hardening reports. Distinct from the Network Security theory course — lab ids use lab-netsec-* to avoid colliding with lab-ports assignments.
- Level
- Intermediate
- Duration
- 6–8 weeks
- Modules
- 4 modules · 8 lessons
- Learning method
- Lessons + labs
What you will learn
- Map OSI/TCP-IP layers and the TCP handshake
- Run host/port discovery only inside authorized lab scope
- Read packet captures for handshake, DNS, and TLS boundaries
- Design least-privilege firewall ACLs and VLAN segmentation
- Detect ARP/MitM/DNS spoof signals and triage IDS/IPS alerts
- Prioritize findings into a network hardening report
Course curriculum
Expand each module for lessons, progress, and labs assigned to that module — not a flat topic dump.
Module 1
Protocol fundamentals & authorized discovery
OSI/TCP-IP addressing plus scoped host/port discovery on lab ranges only.
0/2 lessons
Module 1
Protocol fundamentals & authorized discovery
OSI/TCP-IP addressing plus scoped host/port discovery on lab ranges only.
0/2 lessons
Lessons
- 1. OSI, TCP/IP, and Addressingpreview~20 min
- 2. Authorized Host and Port Discovery~20 min
Enrol to unlock full lessons and track module progress.
Module 2
Traffic analysis & firewall controls
Packet captures and least-privilege stateful ACL design.
0/2 lessons
Module 2
Traffic analysis & firewall controls
Packet captures and least-privilege stateful ACL design.
0/2 lessons
Lessons
- 1. Packet Capture Analysis~20 min
- 2. Firewall ACL and Stateful Audit~20 min
Enrol to unlock full lessons and track module progress.
Module 3
Segmentation & LAN threat detection
VLAN isolation and ARP/MitM/DNS spoof detection concepts.
0/2 lessons
Module 3
Segmentation & LAN threat detection
VLAN isolation and ARP/MitM/DNS spoof detection concepts.
0/2 lessons
Lessons
- 1. VLAN Segmentation and Isolation~20 min
- 2. ARP, MitM, and DNS Spoof Detection~20 min
Enrol to unlock full lessons and track module progress.
Module 4
IDS/IPS triage & hardening assessment
Alert triage and prioritized network hardening reports.
0/2 lessons
Module 4
IDS/IPS triage & hardening assessment
Alert triage and prioritized network hardening reports.
0/2 lessons
Lessons
- 1. IDS/IPS Alert Triage~20 min
- 2. Network Assessment and Hardening Report~20 min
Enrol to unlock full lessons and track module progress.
Inside this course
Labs · Quizzes · Certificate
Labs below are curated for this syllabus (shared engine, course-specific assignments). They unlock with enrol; quizzes match course topics; finish ≈90%+ to claim a CYNARKS Academy certificate.
Course labs
8 assigned labs · free with this course enrol
- TCP/IP & OSI FundamentalsUnlock via course or plan
- Authorized Host & Port DiscoveryUnlock via course or plan
- Packet Capture AnalysisUnlock via course or plan
- Firewall ACL & Stateful RulesUnlock via course or plan
- VLAN Segmentation & IsolationUnlock via course or plan
- LAN Attack Concepts & DetectionUnlock via course or plan
- IDS/IPS Alert TriageUnlock via course or plan
- Network Assessment & Hardening ReportUnlock via course or plan
Track quiz
356 questions matched to this course topics
Knowledge checks for this track only — not a separate global quiz menu.
Start track quizCYNARKS certificate
Educational completion certificate · verify by ID
Your progress: 0% · enrol to unlock claim
Enrol in this course first.