📁 Project — Applies 2.1.1, 2.1.2, and 4.2.4

E-Commerce Architecture

Design a secure network for "Bikes, Boards, and Beyond"  ·  Approx. 2–3 class days

StarringRouter → Firewall → Segmented Network

A recap of CIA, passive analysis, and subnetting, plus the network topology building blocks and defense-in-depth labeling standard for this project.

E-Commerce Architecture network design infographic

🧭 Recap & Application

A company called "Bikes, Boards, and Beyond" needs a secure network — one that keeps customer and employee data safe while still staying accessible to online shoppers and internal staff. Designing that network is entirely your team's job, and everything you need for it, you already have:

2.1.1
CIA triad & data classification
2.1.2
Passive analysis & network attacks
4.2.4
Subnetting & segmentation

What's new here is the diagram itself. You'll build a network topology using three basic building blocks:

RouterFirewallLAN / Segment

You'll start by diagramming a real company's public-facing network from your own passive analysis, then apply what you learn to designing Bikes, Boards, and Beyond's network from scratch — labeling every layer with defense-in-depth terminology as you go.

What you will do in this project

  • Review network topology basics — routers, firewalls, and LANs.
  • Analyze a real e-commerce network's public-facing structure using your Unit 2.1.2 passive analysis.
  • Design a full network topology for a fictional e-commerce company, applying CIA and defense-in-depth.
  • Label every layer of your design with defense-in-depth terminology.
  • Present your design and explore the Network Security R&D Specialist career path.

Why it matters

This is the first time you're designing a network instead of just analyzing or defending one — and the exact skill of recommending controls for specific layers is what AP free-response questions ask for directly.

✅ Self-Check Before You Roll On

Check off each item as you get there. These are not grades — they are your own signal.