TechKnowSurge
CompTIA Network+ 1.1 CompTIA Network+ 1.4 CompTIA Network+ 1.5 Cisco CCNA 1.3 CompTIA A+ Core 1 2.1 Cisco CCNA 1.5
InteractiveNetworkFree

OSI Layer Drag-and-Drop

Drag seven scrambled OSI layer cards into the correct bottom-to-top stack — Physical, Data Link, Network, Transport, Session, Presentation, Application — using what each layer does rather than the number it carries.

Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

The OSI model is the spine of the Protocols and Standards module, and the module is explicit that it is a reference framework rather than a rigid specification — a way of organizing what protocols do so that different suites can be compared, and so that one layer can be replaced without disturbing the rest. This activity tests the one thing the framework is useless without: the order. A student who can recite all seven names in the wrong sequence has learned a word list, not a model. The cards deliberately do not carry layer numbers. If they did, the exercise would collapse into sorting integers, and the student would never have to touch the knowledge the objectives actually name. Each card gives the layer's function instead, which forces the ordering to be reasoned from what the layer does — exactly the reasoning the lessons build. The chain runs like this, and it is worth stating as a chain rather than as seven separate facts. The physical layer can move a signal but has no idea who it is for; it defines the cabling, the connectors, and the electrical or optical encoding of one bit, and it is the layer whose Ethernet preamble never appears in a Wireshark capture because the network card discards it before frame processing begins. The data link layer adds the ability to say who: it frames those bits and delivers them to the next device on this link by MAC address, using Ethernet in the common case and PPP or HDLC on other link technologies. Its reach stops at the link, which is why a router strips this header off at every hop and writes a new one for whatever the next link speaks. The network layer solves that limit with an address that survives the whole journey — IP — and with routing that carries a packet across interconnected networks toward its destination. It reaches the far host but not the right program on it, and the transport layer answers that with port numbers, along with the segmentation and sequencing that let a large transmission be sent in pieces and reassembled, and, where TCP is chosen, the three-way handshake, retransmission of lost segments and flow control. The top three layers are the ones students find hardest, because the module's own lessons spend less time there and because the TCP/IP model collapses all three into a single Application layer. The honest framing is that the collapse is evidence, not a contradiction: modern protocols like HTTP genuinely do not separate session and presentation handling, which is why a four-layer model describes real traffic more comfortably. Within OSI, though, the three remain distinct jobs. The session layer manages the dialogue — opening it, maintaining it, closing it, and keeping track of which exchange a transmission belongs to. The presentation layer makes what arrives interpretable, handling character encoding, format translation, compression and encryption; TLS is the case worth naming, since it genuinely spans this layer and the session layer beneath it and is placed at Presentation by CompTIA convention rather than by clean architecture. The application layer is where the user's software speaks, and where a browser's HTTP GET to a web server originates. The encapsulation story is the reason this ordering is worth internalizing rather than memorizing, and it is carried in the instructions rather than on the cards so that it stays an aid and not an answer key. Data moves down the stack on the sending side with a header added at each step, travels the network, and is unpacked layer by layer on the receiving side. The protocol data unit is renamed as it goes: bits at the physical layer, frames at the data link layer, packets at the network layer, segments at the transport layer, and plain application data above that. That renaming is the clearest single cue for the bottom four layers, and it is deliberately not a cue for the top three — session, presentation and application all carry the same data, so those three have to be ordered from function alone. Two cautions belong here. First, the module is direct that the model does not fit everything: Ethernet does not map cleanly to a single OSI boundary, spanning the physical and data link layers, and ARP sits awkwardly on the layer 2 and 3 line. Treat the model as a guide, and treat the edge cases as evidence that it is a guide. Second, ordering by intuition about which layer sounds more advanced is the habit that produces wrong stacks; the reliable question is what each layer can do that the one beneath it cannot. All seven cards are presented every run rather than a sample, and the reason is that the domain is exactly seven — a stack sampled to a subset is not the OSI model, it is a fragment of one, and the objective being assessed is the complete ordering. This activity is also the inverse of the module's existing Protocol to Layer Sorter, which hands the student a protocol and asks for its layer; this one hands the layers and asks for the stack. The pair works best interleaved with other module content rather than run back to back, since placing them adjacently lets the second one be answered from the first one's screen rather than from memory.

What you'll learn

Aligned to

CompTIA Network+
1.1 Explain concepts related to the Open Systems Interconnection (OSI) reference model.
1.4 Explain common networking ports, protocols, services, and traffic types.
1.5 Compare and contrast transmission media and transceivers.
Cisco CCNA
1.3 Compare physical interface and cabling types
1.5 Compare TCP to UDP
CompTIA A+ Core 1
2.1 Compare and contrast Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) ports, protocols, and their purposes.

Key terms

Open Systems Interconnection Model
OSI
A conceptual framework that standardizes network communication into seven distinct layers.
Physical Layer
Layer 1 of the OSI model, responsible for the transmission of raw bits over a physical medium.
Data Link Layer
Layer 2 of the OSI model responsible for node-to-node data transfer and error detection on a single network segment.
Network Layer
Layer 3 of the OSI model, responsible for logical addressing and routing data packets between networks.
Transport Layer
Layer 4 of the OSI model, responsible for end-to-end communication, flow control, and error recovery.
Session Layer
Layer 5 of the OSI model, responsible for establishing, managing, and terminating communication sessions.
Presentation Layer
Layer 6 of the OSI model, responsible for data translation, encryption, and compression.
Application Layer
The topmost layer of the OSI model (Layer 7) that provides network services directly to end-user applications.
Encapsulation
The process of wrapping data with protocol headers as it passes down the layers of the OSI model.
Protocol Data Unit
PDU
The unit of information passed between peer entities at the same OSI layer, with layer-specific names: segment or datagram at the Transport layer, packet at the Network layer, frame at the Data Link layer, and bit at the Physical layer. Understanding PDU terminology is fundamental to troubleshooting network communication at each layer.
Frame
The unit of data used at Layer 2 (Data Link layer) of the OSI model, containing source and destination MAC addresses, a payload (the encapsulated Layer 3 packet), and a frame check sequence for error detection. Frames are how switches and other Layer 2 devices think about and forward data.
Packet
A unit of data formatted for transmission over a network, containing a header, payload, and sometimes a trailer.
Segment
A unit of data at the TCP transport layer, created by breaking larger data into smaller chunks for transmission and reassembly.
MAC Address
A 48-bit hardware address assigned to a network interface and written as six hexadecimal octets, such as 00:1A:2B:3C:4D:5E. It identifies a device uniquely on a local network segment, and switches forward frames by looking it up in their MAC address table.
IP Address
A numerical label assigned to each device connected to a network that uses the Internet Protocol.
Port
A logical endpoint for communication in a network, identified by a number that specifies a particular service or application.
Ethernet
A widely used wired networking technology that transmits data over copper cable using electrical signals.

Topics

Interactive Ordering

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →