Chapter 50 — Final defense
Lesson map
Lesson 50 published. Map, example, EX148.
flowchart TD
N0["Learning outcomes"]
N1["50.1 Presentation"]
N2["50.2 Questions"]
N3["50.3 Answers"]
N4["50.4 Reflection"]
N5["Preparing for the defense"]
N6["Handling difficult questions"]
N7["Looking back on the route"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6 --> N7
N7 --> EX["Worked example"]
EX --> Q["Exercise EX148"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["50.1 Presentation"]
N2["50.2 Questions"]
N3["50.3 Answers"]
N4["50.4 Reflection"]
N5["Preparing for the defense"]
N6["Handling difficult questions"]
N7["Looking back on the route"]
N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> N6 --> N7 --> Q["EX148"]
[Learning outcomes]
|
v
[50.1 Presentation]
|
v
[50.2 Questions]
|
v
[50.3 Answers]
|
v
[50.4 Reflection]
|
v
[Preparing for the defense]
|
v
[Handling difficult questions]
|
v
[Looking back on the route]
|
v
[Worked example] --> [Exercise EX148]
Learning outcomes
You will (1) present the thesis; (2) answer questions; (3) reflect.
50.1 Presentation
The defense opens with a thirty-minute presentation. Kofi covers the problem, the design, the evidence, the limits and the contribution, using a few clear figures: the zone diagram, the reachable-pairs reduction, the traceability table and the criteria comparison. He avoids reading slides and does not try to show everything, since the examiners have read the thesis. The aim is to remind them of the argument and show that he understands it well enough to explain it simply. He keeps detailed figures on backup slides for questions.
50.2 Questions
The examiners then ask questions for about an hour. They probe three areas: whether the design really applies zero trust ideas or only uses the term; whether the approach would scale to a much larger organisation; and how much risk remains in the flows the policy still permits. Good examiners ask questions to test understanding, not to trap the candidate. Kofi listens to each question fully, asks for clarification when a question is ambiguous, and takes a moment to think before answering rather than rushing.
50.3 Answers
On zero trust, Kofi explains that the design applies some principles from NIST SP 800-207, such as reducing implicit trust between zones and controlling management access tightly, but does not authenticate every request per user and device, so it is a step towards zero trust rather than a full implementation. On scale, he points to the template approach and notes where larger organisations would need automation. On residual risk, he explains that permitted flows remain exposed and are managed by host controls, patching and monitoring of allowed traffic.
50.4 Reflection
At the end, the examiners ask what Kofi would do differently. He answers that he would involve the council's staff representatives and governance officer even earlier, and would build the traceability table from the first week rather than partway through. He reflects that the hardest parts of the project were not technical: securing time from busy engineers, winning budget, and agreeing how logs could be used. The examiners accept the thesis. His reflection, recorded in the final chapter, is that secure networks depend on people and process as much as on equipment.
Preparing for the defense
Kofi prepares by listing likely questions and practising answers with his peers and Dr Vasquez in a mock defense. He reviews the weakest parts of the thesis, such as the small research sample and short availability period, and prepares honest answers that state the limit, explain its effect and describe how it could be addressed. He prepares backup slides with detailed figures, used only if asked. The mock defense reveals that his explanation of the traceability table is too fast, so he simplifies it. Preparation reduces anxiety and helps him answer clearly rather than defensively.
Handling difficult questions
One examiner asks whether the project simply moved risk into the permitted flows. Kofi agrees that permitted flows still carry risk and explains how it is managed: flows are limited to named services, host controls and patching protect servers, and monitoring watches permitted traffic for unusual volume. He acknowledges that segmentation reduces but does not remove risk. When asked a question he cannot fully answer, about long-term costs of certificate management, he says so, gives his best estimate and explains how the council could measure it. Honest answers of this kind build examiners' confidence.
Looking back on the route
The defense closes a five-year path that began with networking basics and ended with a verified design for a real organisation. Kofi notes how each stage contributed: foundations in addressing and protocols made the subnet plan possible, earlier work on monitoring shaped the logging design, and practice with requirements and testing gave the evidence that convinced examiners. He also recognises the role of the council engineers, who now own and run the network. The final lesson he records is that secure networks depend on clear requirements, simple designs, evidence and the people who maintain them.
Worked example
The thesis is accepted.
Synthetic case. The defense is synthetic.
Errors and limits
Defensive answers undermine strong work.
Exercises
- EX148 — Zero trust answer. How does Kofi describe zero trust? Rubric: 3 = principles applied, not full;; 2 = partial;; 1 = vague;; 0 = none.
- EX149 — Scaling answer. How does the design scale? Rubric: 3 = templates;; 2 = easily;; 1 = vague;; 0 = none.
- EX150 — Reflection. State Kofi's reflection. Rubric: 3 = governance and people mattered;; 2 = stated;; 1 = vague;; 0 = none.
Synthesis
The defense closes a five-year route from foundations to verified engineering.
Continue studying — chapter 50 of 50
← Chapter 49 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →