LO1: Explore networking model and protocols.

Assignment Brief 

Programme title & Number

NCFE Level 4 Diploma: Cyber Security Engineer (603/7748/3)

Unit title & Number

Unit 2: Cyber Security Architecture (D/651/0934)

Assignment title

Cyber Security Architecture

Programme Cohort

April 2026

Issue Date

14-Sep-2026

Final Assignment Submission Deadline

30-Nov-2026

Late Submission Guidelines and

Feedback

The learners are required to follow the strict deadline set by the College for assignment submissions, in accordance with the NCFE submission guidelines and the College`s submission policy. They should also refer to the Merit and Distinction criteria, which require evidence of meeting agreed timelines and the ability to plan and organise time effectively, without which the learner may not expect to receive a higher grade.

Note: The report may be resubmitted to achieve a higher grade, from Pass to Merit or Distinction. However, students with a grade of Not Yet Achieved may be allowed only one further chance to achieve the unit.

Feedback:

Formative feedback will be available in class during the Term. Final feedback will be available once the grades are confirmed.

Preparation Guidelines

Recommended Words: 4000 words

1. Submission Requirement

You must submit a written report addressing all the tasks outlined in this assignment. Any supporting documents should be attached as a separate file in the appendix section of your assignment and submitted before the specified deadline. All work must be uploaded through the Turnitin submission link available on the CSA VLE, where it will be checked for academic integrity.

2. Cover Page

The report must begin with the official cover sheet provided with this assignment brief, including a signed declaration, which should appear as the first page of the document.

3. Table of Contents

All main headings (such as Tasks or Learning Outcomes) and subheadings (for example, Pass, Merit, and Distinction criteria) must be presented professionally and listed in the Table of Contents, which should appear immediately after the cover page.

4. Introduction & Conclusion

Add a brief Introduction at the start of the report

Add a brief Conclusion at the end of the report

5. Formatting Requirements

a. The document must  follow these formatting guidelines:

b. Font size must be between 10 and 14 points (preferred size: 11).

c. Acceptable fonts include Arial, Calibri, Times New Roman, or Open Sans.

d. Line spacing must be set to 1.5.

6. Referencing Requirements

All submissions must be properly referenced. Any material taken from external sources must be cited using the Harvard Referencing Style (HRS). A complete reference list or bibliography using this system must also be included at the end of the report.

7. Language and Writing Style

Use professional academic language throughout the assignment, ensuring that explanations are clear and well-structured. Avoid the use of bullet points and ensure that responses are written in full paragraphs. You are encouraged to use a word processor spell-check tool to minimise spelling and grammatical errors.

8. Original Work

The assignment must be written in your own words. Any quotations, figures, or illustrations taken from external sources must be clearly referenced. Ensure that the English used is clear, concise, and easy to understand, and that the work is presented logically and professionally.

9. Appendix

Any diagrams, charts, tables, or code snippets included in the report must be clearly labelled and explained within the context of your discussion. Additionally, attach the images, screenshots, PPT Presentation, or dataset files at the start of the Word document.

10. File Format and Naming

The assignment must be submitted as a single Microsoft Word document (.docx). The file name must follow this format:

Unit02_FirstName_LastName_Assignment.docx

Important Information

To gain a Pass in an NCFE Diploma module, you must meet ALL the Pass criteria; to gain a Merit, you must meet ALL the Merit and Pass criteria; and to gain a Distinction, you must meet ALL the Distinction, Merit, and Pass criteria.

Learning Outcomes (LOs)

LO1: Explore networking model and protocols.

LO2: Apply the characteristics of digital system components, implementing security controls.
LO3: Apply the concepts of cryptography

Scenario

Case Study: SkyShield Cloud Services Ltd (Must use the given organisation, or an organisation from the same industry)

SkyShield Cloud Services Ltd is a UK-based cloud infrastructure provider offering virtual servers, cloud storage, disaster recovery, and managed hosting services. The company operates a primary data centre in Manchester, a disaster recovery site in Birmingham, and regional support offices. It hosts critical systems and sensitive data for clients in healthcare, retail, finance, and education. Its infrastructure includes virtual servers, networking devices, firewalls, cloud management platforms, storage systems, and remote administration tools.

Key Problems Identified

A recent review identified weaknesses in the organisation’s cyber security infrastructure. The flat network design allows unnecessary communication between management systems, customer environments, and employee devices. Inconsistent ACL configurations increase the risk of unauthorised access, while remote administrators rely on password-only VPN authentication. Limited network monitoring and unencrypted customer backup data further increase risks to data security and regulatory compliance.

Recommendations for Improvement

Senior management has commissioned a full cyber security architecture review to improve the organisation’s security posture. The review should focus on implementing secure network segmentation, strengthening routing and access controls, improving remote access security, deploying effective monitoring solutions, and establishing robust cryptographic protections for sensitive client data. The organisation also aims to align its infrastructure with ISO 27001, NCSC Cyber Assessment Framework guidance, and recognised cloud security best practices.

Your Role

You have recently joined CyberCore Infrastructure Consulting as a Junior Cloud Security Architect.You have been assigned to support SkyShield Cloud Services Ltd in reviewing its cyber security architecture. Your responsibilities include analysing networking models and protocols, designing secure network architectures, implementing appropriate security controls, and recommending cryptographic solutions that improve the security of cloud-based systems and customer data.

Tasks

Task 1: Networking Structures & Subnet Design (Covers LO1 + part of LO2)

Sub-Scenario:

SkyShield Cloud Services Ltd operates a large cloud infrastructure environment that includes virtual servers, storage networks, cloud management systems, remote administration platforms, and customer-hosted services. Management requires a detailed review of how information moves through the infrastructure and how network segmentation, routing, and protocol selection can improve security, performance, and resilience.

Requirements:

1. Describe the structure and layers of the OSI and TCP/IP models, including:

1. The function of each OSI layer

2. The function of each TCP/IP layer

3. The core TCP/IP protocols and how IP addressing works (P1)

2. Outline common network issues (e.g., latency, packet loss, congestion, jitter) and explain error detection as well as error correction mechanisms that help prevent or resolve them (e.g., checksums, CRC, TCP acknowledgements). (P2)

3. Design and implement a network architecture containing at least four subnets (e.g., Management Network, Customer Zone, DMZ, Admin Wi-Fi ). Your design must include:

1. A clear subnet layout

2. IP address (IPv4) ranges and subnet masks along with its gateway address.

3. Basic routing plan for communication between subnets (P3) 

For Higher Grade:

4. Illustrate the relationship between applications, protocols, ports, services, and devices within the OSI/TCP-IP models. Use tables or diagrams to show how they interact in a functioning network. (M1)

5. Evaluate the suitability of different networking protocols and models (e.g., TCP vs UDP, HTTP vs HTTPS, Telnet vs SSH) for the case study scenario, including security considerations. (D1)

Task Requirements

You are required to produce a written report addressing the requirements of this task. Use diagrams and simulation snapshots to illustrate your points.

Recommended word count: 1500 words.

Task 2: Apply Characteristics of Digital System Components, Implementing Security Controls (LO2)

Sub-Scenario:

Following the recent security review, management identified weaknesses in network segmentation, access control policies, monitoring capabilities, and remote administration processes. The organisation requires a redesigned security architecture that protects critical cloud infrastructure, customer-hosted environments, management networks, and administrative systems while maintaining secure access for authorised personnel.

Requirements:

1. Identify common digital system components such as switches, routers, firewalls, and servers. Explain their functions within a secure network. (P4)

2. Design and test a system that uses appropriate security controls based on the given security case study. You must:

1. Implement static or dynamic routing

2. Use ACLs (Access Control Lists) to restrict traffic between subnets

3. Demonstrate the network in Packet Tracer or GNS3

4. Show tests of allowed and blocked traffic (P5)

For higher grade:

3. Propose a comprehensive security plan for the digital system described in the case study. Include:

1.  Network-level controls

2.  Device-level controls

3.  Monitoring mechanisms

4.  Policy and procedural controls (M2)

4. Outline mitigation techniques for common vulnerabilities (e.g., DDoS, MITM attacks, weak passwords, outdated protocols). Explain how these techniques reduce risk. (M3)

5. Justify your selection of components and controls in the security plan. Explain why the chosen devices, protocols, and security measures are appropriate for the scenario and how they improve overall security. (D2)

Hint: For M2, you should propose a comprehensive security plan addressing advanced threats, using frameworks like NIST or ISO 27001. Outline mitigation techniques for identified vulnerabilities (e.g., DDoS, man-in-the-middle attacks, etc.). Also justify your choice of components and security controls in the plan.

Task Requirements

You should provide a network diagram and a written report. Include screenshots or evidence of network simulation testing (e.g., in Cisco Packet Tracer). 

Recommended word count: 1500 Words.

Task 3: Apply the Concepts of Cryptography (LO3)

Sub-Scenario:

SkyShield Cloud Services Ltd stores and processes highly sensitive information including customer backups, virtual machine images, authentication credentials, configuration files, disaster recovery data, and administrative records. The organisation requires strong cryptographic controls to protect data at rest and in transit, ensure data integrity, and prevent unauthorised access. Management has requested a practical demonstration showing how encryption technologies can be implemented to secure cloud-hosted information and support long-term key management requirements.  

Requirements:

1. Describe the principles of symmetric encryption, asymmetric encryption, and hashing, explaining how each method protects data. (P6)

2. Design a basic encryption scheme using Python or another language to demonstrate how sensitive data in the case study can be secured. (P7)

3. Develop a secure key management plan, including:

1.  Key generation

2.  Key rotation

3.  Secure key storage

4.  Key archival

5.  Vulnerabilities that need to be avoided (P8)

For Higher grade:

4. Differentiate between encryption algorithms (e.g., AES, RSA, SHA-256) in terms of strength, performance, and recommended use cases. (M4)

5. Analyse the security trade-offs between different encryption methods and key management approaches. Discuss performance, usability, scalability, and risk. (D3)

Hint: For a higher grade, you should extend your discussion of Task 3.1 by comparing and discussing strengths and weaknesses of encryption algorithms like AES, RSA, and SHA-256. Also analyse trade-offs between encryption strength, performance, and usability.

Task Requirements

Submit your encryption code and a reflective commentary. Include recommendations for future enhancements to the encryption system.

Recommended word count: 1000 words.

Plagiarism and Collusion

Any plagiarism or collusion will be taken very seriously in accordance with the policies of the college. Below are the definitions and parameters of plagiarism and collaboration in this context.

Presenting someone else`s work as your own is plagiarism. It involves turning in collaborative homework as a solo project and copying information verbatim from books or the Internet without citing the source.

Plagiarism refers to the practice of taking another person`s assignments and turning them in as your own.If plagiarism or collusion is suspected, it will be investigated and dealt with in accordance with college policy (please refer to the student handbook for further information on plagiarism and collusion).

AI Use Policy for This Assignment

To support academic integrity, learners must follow the guidance below regarding the use of Artificial Intelligence (AI), including tools such as ChatGPT, Copilot, Bard, and other generative AI systems.

Permitted Use

Students may use AI tools for:

1. Researching background concepts

2. Generating ideas during early planning

3. Checking spelling, grammar, structure, and formatting

4. Clarifying understanding of terminology

5. Practising or testing knowledge

6. Creating datasets only if anonymised and checked for accuracy

7. Producing non-assessed drafts for inspiration

Not Permitted

Students must not use AI tools to:

8. Generate full answers, explanations, or solutions that are directly submitted as their own

9. Write entire sections of the assignment

10. Produce analysis or evaluation without meaningful human input

11. Create polished final content that the student only copies and pastes

12. Bypass learning activities by submitting AI-generated work

13. Fabricate citations, references, or invented facts

Student Responsibilities

Learners must:

14. Ensure all submitted work is their own, original, and written in their own words

15. If AI is used in any way, this must be declared in your references.

16. Clearly reference any AI assistance following the college’s academic integrity policy

17. Keep drafts to demonstrate development of work if requested

18. Verify all information for accuracy and relevance

19. Use AI as a support tool, not a writing substitute

Consequences of Misuse

Improper use of AI may be treated as academic misconduct and may result in:

20. Work being rejected

21. No grade being awarded

22. Requirement to resubmit

23. Further disciplinary action in serious cases

Submission

1. Initial submission of coursework to the tutors is compulsory in each unit of the course.

2. The student must check their assignments on the Caspian School of Academics (CSA) VLE using Turnitin to ensure the similarity index for their assignment stays within the College-approved level. A student can check the similarity index of their assignment up to five times in the Draft Assignment submission point located on the home page of the CSA VLE.

3. All Final coursework must be submitted to the Final submission point in the Unit (not to the Tutor). The student would be allowed to submit only once, and that is the final submission.

4. Any computer files generated, such as program code (software) and graphic files that form part of the coursework, must be submitted as an attachment to the assignment, along with all documentation.

5. Any portfolio for a Unit must be submitted as an attachment in the assignment

Submit to: CSA VLE (online submission only) 

Extension and Late Submission

1. You must use an Exceptional Extenuating Circumstances (EEC) form, which is accessible at the Examination Office and CSA VLE, to request an extension if you require one for a legitimate cause. Do not request a coursework extension from the tutors as they do not possess the authority to extend the deadlines for coursework. The completed form must be turned into the Examination Office with supporting documentation, such as a medical certificate if you are ill.

2. Late entries will be accepted and graded in accordance with college policy. Please be aware that late submissions might not receive Merit and Distinction grades.

3. All late coursework must be submitted to the Late submission point into the unit (not to the Tutor) in the CSA VLE. A student is allowed to submit only once and that is also treated as the final submission.

4. If you fail in the Final or Late submission, you can resubmit in the Resubmission window. 

Explanation of Terms

This table explains how the terms used at level 4 in the unit content are applied to this qualification (not all verbs are used in this qualification).

Analyse

 Break the subject or complex situations into separate parts and examine
 each part in detail. Identify the main issues and show how the main ideas
 are related to practice and why they are important. Reference to current
 research or theory may support the analysis.

Critically analyse

 This is a development of ‘analyse’ which explores limitations as well as
 positive aspects of the main ideas in order to form a reasoned opinion.

Clarify

 Explain the information in a clear, concise way showing depth of
 understanding.

Classify

 Organise accurately according to specific criteria.

Collate

 Collect and present information arranged in sequence or logical order that is
 suitable for purpose.

Compare

 Examine the subjects in detail, consider and contrast similarities and
 differences.

Critically compare

 This is a development of ‘compare’ where the learner considers and
 contrasts the positive aspects and limitations of the subject.

Consider

 Think carefully and write about a problem, action or decision showing how
 views and opinions have been developed.

Demonstrate

 Practical application of an element/content to show that you understand
 theories/concepts in a practical sense.

Describe

 Provide a broad range of detailed information about the subject or item in a
 logical way.

Discuss

Write a detailed account that includes contrasting perspectives.

Draw conclusions
 (which...)

Make a final decision or judgement based on reasons.

Evaluate

 Examine strengths and weaknesses, arguments for and against and/or
 similarities and differences. Judge the evidence from the different
 perspectives and make a valid conclusion or reasoned judgement. Apply
 current research or theories to support the evaluation.

Critically evaluate

 This is a development of ‘evaluate’ where the learner debates the validity of
 claims from the opposing views and produces a convincing argument to
 support the conclusion or judgement.

Examine

 Look closely at something. Think and write about the detail, and question it
 where appropriate.

Explain

 Apply reasoning to account for how something is or to show understanding
 of underpinning concepts. Responses could include examples to support
 these reasons.

Explore

 Consider an idea or topic broadly, searching out related and/or particularly
 relevant, interesting or debatable points.

Identify

 Apply an in-depth knowledge to give the main points accurately (a
 description may also be necessary to gain higher marks when using
 compensatory marking).

Investigate

 To inquire into (a situation or problem) to explore solutions.

Justify

 Give a detailed explanation of the reasons for actions or decisions.

Perform

 Present/enact/demonstrate practically.

Reflect

 Learners should consider their actions, experiences or learning and the
 implications of these in order to suggest significant developments for
 practice and professional development.

Review and revise

 Look back over the subject and make corrections or changes based on
 additional knowledge or experience.

Summarise

 Give the main ideas or facts in a concise way to develop key issues.

Test

Complete a series of checks utilising a set procedure.