0:00–0:20
Written Exam
0:20–2:00
Terminal Practical
0:00 – 0:20Written Exam · 20 min · 20 marks
Administering the written portion
- Distribute FinalExam_Student.docx (printed) to every student. Pen and paper only — no computers, no phones open.
- Section A — Short Answer (8 marks), Section B — Command Identification (7 marks), Section C — Scenario Analysis (5 marks). Remind students of the time split before starting: roughly 8 / 7 / 5 minutes respectively, but they may move between sections freely.
- At the 20-minute mark, collect every written paper before any student opens a terminal. Do not allow the practical scenario to be distributed until every written paper is in hand.
Proctoring note: No man pages, no --help, no notes for the written portion — that access is reserved for the practical. The written section tests recall and identification specifically because the practical will test application.
0:20 – 2:00Terminal Practical · 100 min · 100 marks
Administering the practical — "New Branch Deployment for Ironclad Freight Co."
- Distribute the practical scenario immediately after written papers are collected. Confirm every student's S1/S2/S3 VMs are in the clean, healthy state confirmed during Thursday's VM health check — restore the Thursday snapshot now if any doubt exists.
- Seven tasks, each independently markable: Task 1 Secure Remote Access (12), Task 2 Firewall Implementation (15), Task 3 NTP & Centralised Logging (13), Task 4 DHCP & DNS Zone Build (18), Task 5 Nginx/SSL/DNS Views (17), Task 6 WireGuard VPN Tunnel (15), Task 7 Docker & Reverse Proxy (10).
- Man pages and --help are permitted. No internet, no notes, no collaboration between students. Marking is on verified outcome — the instructor runs the "Instructor verifies" commands listed on each task, not a review of command history.
- Give a 15-minute and a 5-minute time warning. Students who finish early may use remaining time to double-check any task rather than leaving — partial credit is available on every task and it's worth a second pass.
Grading reference: Full task specifications, instructor-verification commands, and the complete marking guide are in FinalExam_AnswerKey.docx (instructor copy — do not distribute).
Marks breakdown
| Component | Marks | Weight |
| Written — Section A (Short Answer) | 8 | 7% |
| Written — Section B (Command ID) | 7 | 6% |
| Written — Section C (Scenario Analysis) | 5 | 4% |
| Practical — Task 1: Secure Remote Access | 12 | 10% |
| Practical — Task 2: Firewall Implementation | 15 | 13% |
| Practical — Task 3: NTP & Centralised Logging | 13 | 11% |
| Practical — Task 4: DHCP & DNS Zone Build | 18 | 15% |
| Practical — Task 5: Nginx, SSL & DNS Views | 17 | 14% |
| Practical — Task 6: WireGuard VPN Tunnel | 15 | 13% |
| Practical — Task 7: Docker & Reverse Proxy | 10 | 8% |
| TOTAL | 120 | 100% |
Passing requirement: Written and Practical portions must each individually reach 50% to pass NETW-0014. Calculate and record both subtotals separately before combining into the final mark.