Sounds so easy, but there is so much depth in so many areas that people can drill into. If someone starts talking convincingly about the OS handling keyboard interrupts or about HTTPS certificate revocation during the TLS handshake explanation etc, you know they are probably worth bringing in for a face to face.
Someone bluffing will usually fail this really hard - "The browser connects to example.com and downloads the page." or something. Uh-huh. Maybe they talk about DNS ... Maybe they talk about a TCP connection ... Maybe they talk about retrieving the HTML and parsing it ... but even then, if they get that far that will be better than a lot of bluffers. If they have simply revised anticipating this question and can answer everything then congrats - they've just educated themselves in a lot of the core fundamentals :)
As an interviewer this question can easily take up a whole 30 min phone screener as good candidates get deeper and deeper.