Class 2- Internet Security

For each of the following systems, research and document 3 parts what threat does it address? what’s the trust model? what’s the residual risk?

Type of Threat	Threat	Trust Model	Residual Risk
PgP(end to end email security)
SSH(Secure remote access)
VPN / IPsec (network-layer tunneling
MACsec (link-layer encryption)
DNS Security (DNSSEC & DNS spoofing)
IDS / IPS (detection vs. prevention)

Complete these exercises:

TLS Handshake Trace

Trace a real TLS handshake and an encrypted data segment. Identify how the session is established — cipher suite, certificate, key exchange — and confirm what an observer can and cannot see.

Port Scan & Firewall

Your VM will be subjected to a port scan. Determine what it reveals about your exposed services, then configure the firewall to reduce what’s reachable from outside.