OPNsense · Self-assessment

Knowledge checks

Every knowledge check in this course, in curriculum order. Each link opens the page at its quiz. The questions are auto-graded in the browser and nothing is recorded — a wrong answer costs you only the explanation, which is the part worth reading.

Knowledge checks: 288
Parts covered: 48
Of all lessons: 100%

Part I

Networking Foundations for Firewall Administrators

6 checks

Ethernet, MAC and ARP — the Layer 2 the firewall operator must readFrames, MAC addresses, ARP, broadcast domains and why a firewall operator must read Layer 2 evidence.→
IPv4 and IPv6 addressing, CIDR and subnetsHow addresses, masks and subnets work; what a /24 means; how the firewall operator uses them every day.→
TCP, UDP and ICMP — the protocols every firewall rule decides onWhat each transport protocol does; how a stateful firewall tracks connections; why ICMP is more than ping.→
Gateways, default routes and asymmetric routingHow a host and a firewall decide which router to send to; how asymmetric routing breaks stateful filtering.→
DNS for the firewall operatorHow DNS works at the resolution level the firewall cares about; what DNSSEC is and is not; split-horizon DNS.→
DHCP for the firewall operatorHow DHCP works at the depth the firewall operator needs; lease behaviour; relay; reservations; DHCPv6.→

Part II

Routing Fundamentals

6 checks

Part III

Stateful Firewalling and PF

6 checks

Part IV

OPNsense Architecture

6 checks

Part V

Installation and Initial Deployment

6 checks

Part VI

Hardware and Virtualisation Design

6 checks

Part VII

Interface Management

6 checks

Part VIII

Management Plane Security

6 checks

Part IX

Firewall Rules

6 checks

Part X

Aliases and Floating Rules

6 checks

Part XI

Firewall States

6 checks

Part XII

NAT Fundamentals and Outbound NAT

6 checks

Part XIII

Port Forwarding and NAT Reflection

6 checks

Part XIV

VLANs and Segmentation

6 checks

Part XV

DMZ Architecture

6 checks

Part XVI

IPv6

6 checks

Part XVII

DHCP

6 checks

Part XVIII

DNS and Unbound

6 checks

Part XIX

Multi-WAN and Gateway Groups

6 checks

Part XX

VPN Fundamentals

6 checks

Part XXI

WireGuard

6 checks

Part XXII

IPsec

6 checks

Part XXIII

VPN Troubleshooting

6 checks

Part XXIV

PKI and Certificates

6 checks

Part XXV

Authentication and Identity

6 checks

Part XXVI

High Availability Fundamentals

6 checks

Part XXVII

CARP

6 checks

Part XXVIII

pfsync and Configuration Synchronisation

6 checks

Part XXIX

HA Network Design, Failure Scenarios, Maintenance

6 checks

Part XXX

Dynamic Routing

6 checks

Part XXXI

Intrusion Detection and Suricata

6 checks

Part XXXII

TLS Inspection and Content Filtering

6 checks

Part XXXIII

Logging and Remote Logging

6 checks

Part XXXIV

Monitoring and Observability Integration

6 checks

Part XXXV

Performance and State Table

6 checks

Part XXXVI

Packet Capture and Diagnostics

6 checks

Part XXXVII

Packet Flow Methodology

6 checks

Part XXXVIII

Troubleshooting Methodology

6 checks

Part XXXIX

Lockout Prevention and Console Recovery

6 checks

Part XL

Backup, Restore, Disaster Recovery

6 checks

Part XLI

Upgrades and Plugin Management

6 checks

Part XLII

API and Automation

6 checks

Part XLIII

Ansible-Driven Firewall Configuration

6 checks

Part XLIV

Change Management and Rule Review

6 checks

Part XLV

Production Hardening and Zero-Trust Concepts

6 checks

Part XLVI

Remote Access and Site-to-Site Architecture

6 checks

Part XLVII

Capacity Planning

6 checks

Part XLVIII

Production Reference Architecture

6 checks