Cybersecurity III: Ethical Hacking and Penetration Testing ss 2 plan

LESSON PLAN

CYBERSECURITY III: ETHICAL HACKING AND PENETRATION TESTING

Lesson Information	Details
Subject	Digital Technologies
Class	SSS 2
Term	Third Term
Week	6
Topic	Cybersecurity III: Ethical Hacking and Penetration Testing
Duration	80 Minutes (Double Period)
Date	________________

1. Learning Objectives

By the end of the lesson, students should be able to:

1. Explain the meaning of ethical hacking.
2. Define penetration testing.
3. Differentiate between ethical hacking and malicious hacking.
4. Describe the basic stages of penetration testing.
5. Identify the rules and precautions for responsible security testing.

2. Previous Knowledge

Students have basic knowledge of computer systems, networks, passwords and cybersecurity practices.

3. Instructional Materials

• Computer or laptop, where available.
• Whiteboard and markers.
• Charts showing examples of ethical and malicious hacking.
• Prepared scenario cards for classroom discussion.
• CMPNOTE lesson note on Cybersecurity III.

4. Teaching Methods

Explanation, guided discussion, questioning, demonstration and group activity.

5. Lesson Presentation

Time	Teacher's Activities	Students' Activities
8 mins	Introduction: Revises cybersecurity and asks students how unauthorised access can affect computer users. Introduces ethical hacking as a way of identifying security weaknesses with permission.	Respond to questions and give examples of ways computer systems and accounts can be attacked.
12 mins	Meaning of Ethical Hacking: Defines ethical hacking, identifies ethical hackers and explains why organisations use authorised security testing.	Listen, take notes and explain the purpose of ethical hacking in their own words.
12 mins	Penetration Testing: Defines penetration testing and explains planning, information gathering, identifying weaknesses, controlled testing, reporting and retesting.	Identify the stages of penetration testing and explain why authorisation and planning are necessary.
12 mins	Ethical versus Malicious Hacking: Compares both practices in terms of permission, purpose, scope, handling of information and possible outcomes.	Compare the two types of hacking and classify examples provided by the teacher.
14 mins	Responsible Security Testing: Explains permission, testing scope, privacy, prevention of unnecessary damage, accurate record-keeping and responsible reporting.	State precautions for responsible testing and explain why students must use authorised practice environments.
12 mins	Class Activity: Presents scenarios involving authorised website testing, unauthorised account access and testing beyond approved limits. Guides students in analysing each situation.	Work in groups to classify each scenario and justify answers using permission, purpose and scope.
10 mins	Evaluation and Conclusion: Asks oral questions, corrects misunderstandings and summarises the main points of the lesson.	Answer evaluation questions and state the key rules for responsible security testing.
Total: 80 Minutes

6. Evaluation

The teacher asks students the following questions:

1. What is ethical hacking?
2. Define penetration testing.
3. State three differences between ethical and malicious hacking.
4. Mention four stages of penetration testing.
5. State five rules for responsible security testing.

7. Assignment

1. Explain the meaning of ethical hacking and penetration testing.
2. Prepare a table showing five differences between ethical and malicious hacking.
3. Describe six precautions that should be followed during responsible security testing.
4. Give two examples of safe environments where students can practise cybersecurity skills.

8. Reference

• CMPNOTE SSS 2 Third Term Lesson Note: Cybersecurity III.
• Digital Technologies teaching materials and classroom demonstrations.