Get 100% Authentic WGU Network-and-Security-Foundation Dumps with Correct Answers
New Training Course Network-and-Security-Foundation Tutorial Preparation Guide
NEW QUESTION # 27
A person is troubleshooting a network issue and needs to see details about network adapters and their settings.
Which Windows command should be used?
- A. ipconfig
- B. nslookup
- C. netstat
- D. traceroute
Answer: A
Explanation:
Theipconfigcommand in Windows provides details about a computer's network adapters, including IP addresses, subnet masks, default gateways, and DNS settings. It is particularly useful for troubleshooting connectivity issues.
* traceroute(or tracert in Windows) is used to trace the path packets take to a destination.
* nslookupis used for querying DNS records.
* netstatprovides details about active network connections and listening ports, but not adapter configurations.
NEW QUESTION # 28
Which layer of the TCP/IP model includes the Internet Protocol (IP)?
- A. Transport
- B. Application
- C. Network or internet
- D. Physical or network access
Answer: C
Explanation:
TheNetwork or Internet layerof the TCP/IP model is responsible for addressing, routing, and delivering packets across networks. TheInternet Protocol (IP)operates at this layer, ensuring thatdata is correctly routed from the source to the destination.
* Physical or network access layerdeals with hardware transmission (e.g., Ethernet, Wi-Fi).
* Application layerincludes end-user services (e.g., HTTP, FTP).
* Transport layermanages data flow using protocols like TCP and UDP but does not handle IP addressing.
NEW QUESTION # 29
An organization is the victim of an attack in which an attacker intercepts messages between two parties before transferring them to the correct destination.
What is the type of cyberattack described in this scenario?
- A. Man-in-the-middle attack
- B. Pharming
- C. Credential stuffing
- D. Social engineering
Answer: A
Explanation:
Aman-in-the-middle (MITM) attackoccurs when an attacker secretly intercepts and relays communication between two parties. This allows the attacker to steal data, modify messages, or inject malicious content without the victims' knowledge.
* Credential stuffingreuses stolen login credentials but does not involve interception.
* Social engineeringmanipulates users rather than intercepting messages.
* Pharmingredirects users to fraudulent websites, but it does not intercept communication.
NEW QUESTION # 30
A company is specifically worried about buffer overflow attacks.
Which strategy should be used as a mitigation against this type of attack?
- A. Implement intrusion protection software
- B. Disable caching
- C. Detect code vulnerabilities
- D. Use server-side validation
Answer: C
Explanation:
Detecting code vulnerabilitiesthroughregular security audits, code reviews, and static analysis toolshelps prevent buffer overflow attacks. Developers should implementbounds checking,memory-safe programming languages, and input validationto mitigate risks.
* Disabling cachingdoes not prevent buffer overflow attacks.
* Server-side validationhelps with input security but does not directly address buffer overflows.
* Intrusion protection softwaremay detect attacks but does not prevent vulnerabilities in code.
NEW QUESTION # 31
A library has a network that allows patrons to use their mobile devices to connect to the internet.
Which type of network is described?
- A. SAN
- B. PAN
- C. WLAN
- D. MAN
Answer: C
Explanation:
AWireless Local Area Network (WLAN)enables wireless connectivity within a defined geographic area, such as a library, office, or coffee shop. WLANs use Wi-Fi technology to allow users to access the internet without physical cables.
* Storage Area Networks (SANs)are used for data storage and do not provide internet connectivity to users.
* Metropolitan Area Networks (MANs)cover larger areas, such as cities, and are not used within a single building.
* Personal Area Networks (PANs)connect personal devices like smartphones and laptops over short distances, such as via Bluetooth, but do not support public internet access.
NEW QUESTION # 32
An attacker uses malicious software to disable network resources, demanding a ransom to restore access.
Which category describes the purpose of the attack?
- A. Data export
- B. Launch point
- C. Denial of availability
- D. Data modification
Answer: C
Explanation:
This describes aransomware attack, which falls underdenial of availabilitybecause it prevents users from accessing their data or systems until a ransom is paid. Attackers use encryption to lock files, disrupting operations.
* Data modificationrefers to unauthorized changes to information.
* Data exportinvolves stealing data rather than disabling access.
* Launch pointdescribes an attacker's use of a compromised system to attack others.
NEW QUESTION # 33
A start-up company wants to build its computer network by starting with the base-level resources offered by a cloud service. In this way, the company won't have to buy physical hardware but canstill have complete control over operating systems and other software.
Which cloud service model should be used?
- A. Platform as a Service (PaaS)
- B. Function as a Service (FaaS)
- C. Infrastructure as a Service (IaaS)
- D. Software as a Service (SaaS)
Answer: C
Explanation:
Infrastructure as a Service (IaaS)provides virtualized computing resources, including virtual machines, storage, and networking, while allowing users full control over operating systems and applications. Examples include AWS EC2 and Google Compute Engine.
* SaaSprovides ready-to-use applications (e.g., Google Docs).
* FaaSruns code in response to events (e.g., AWS Lambda).
* PaaSprovides development environments but not full infrastructure control.
NEW QUESTION # 34
An attacker issues commands to access a file on a network drive and overwrite it with new data.
What is the purpose of the attack?
- A. Denial of availability
- B. Data export
- C. Launch point
- D. Data modification
Answer: D
Explanation:
Data modification attacksinvolve unauthorized changes to stored data, altering information to mislead, disrupt, or destroy integrity. Attackers may modify logs, transactions, or records for fraud or sabotage.
* Launch pointis when a system is used to attack others.
* Data exportis the theft of data.
* Denial of availabilitymakes data inaccessible, but does not necessarily modify it.
NEW QUESTION # 35
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?
- A. Integrity
- B. Availability
- C. Confidentiality
- D. Innovation
Answer: B
Explanation:
Availabilityensures that systems and data remain accessible and operational, even in the event of failures or attacks. Adisaster recovery plan (DRP)focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
* Confidentialityfocuses on restricting unauthorized access.
* Integrityensures data remains unaltered, but does not address service continuity.
* Innovationis unrelated to the CIA triad.
NEW QUESTION # 36
A developer is using shared functions for software code in order to reduce complexity, knowing that greater complexity and volume of code are harder to defend against attacks.
Which security principle is demonstrated in this scenario?
- A. Zero-trust model
- B. Least common mechanism
- C. Least privilege
- D. Economy of mechanism
Answer: D
Explanation:
Theeconomy of mechanismprinciple states that security systems should beas simple and small as possible.
Reducing complexity makes security mechanisms easier to understand, audit, and defend against attacks.
* Least common mechanismreduces shared resources to limit security risks.
* Least privilegerestricts access based on necessity.
* Zero-trust modelassumes no implicit trust in users or devices.
NEW QUESTION # 37
Which layer of the OSI model includes the ICMP?
- A. Network
- B. Transport
- C. Session
- D. Application
Answer: A
Explanation:
TheNetwork layer(Layer 3 of the OSI model) includes theInternet Control Message Protocol (ICMP), which is used for network diagnostics (e.g.,pingcommand). ICMP helps in error reporting and network troubleshooting.
* Transport layerhandles reliable data delivery (e.g., TCP, UDP).
* Session layermanages communication sessions.
* Application layerprovides end-user services.
NEW QUESTION # 38
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Implement a bus topology
- B. Configure RADIUS authentication
- C. Implement wired equivalent privacy (WEP)
- D. Avoid the use of asymmetric encryption
Answer: B
Explanation:
Configuring RADIUS authenticationenhances Wi-Fi security by requiring user authentication before granting access to the network. This prevents unauthorized users from connecting and mitigates risks from rogue access points.
* WEPis outdated and insecure; WPA2/WPA3 with RADIUS should be used instead.
* A bus topologyis a network design choice, not a security measure.
* Avoiding asymmetric encryptionweakens security rather than improving it.
NEW QUESTION # 39
After recently experiencing a security breach, a company is working on improving its database security. As a part of its security governance strategies, the company is developing a database security checklist.
Which component is important to include in this checklist?
- A. Outsourcing data management to third-party vendors
- B. Restricting physical access to locations where data is housed
- C. Disclosing any instances of breaches of personal data
- D. Developing algorithms for secure access to data
Answer: B
Explanation:
Restricting physical accessto data storage facilities is a critical part of database security. Even with strong cybersecurity measures,unauthorized physical accessto servers can lead to breaches. Security strategies includebiometric authentication, surveillance cameras, and restricted entry zones.
* Disclosing breachesis required by compliance laws but does not protect data proactively.
* Developing algorithmsimproves security but is not a fundamental checklist item.
* Outsourcing data managementcan introduce security risks if not properly controlled.
NEW QUESTION # 40
An attacker uses a network device to take over an existing connection between two network computers.
Which malicious attack strategy is represented in the scenario?
- A. Dictionary attack
- B. Session hijacking
- C. Social engineering
- D. IP address spoofing
Answer: B
Explanation:
Session hijackingoccurs when an attacker takes over an established connection between two devices, often by stealing session tokens or manipulating network traffic. This allows the attacker to impersonate a legitimate user and gain unauthorized access.
* Dictionary attackinvolves password guessing, not hijacking active connections.
* Social engineeringtricks users into providing information but does not hijack sessions.
* IP address spoofingdisguises the attacker's identity but does not necessarily take over a session.
NEW QUESTION # 41
A person is troubleshooting a network issue and needs to see a list of all active network connections.
Which Linux command should be used?
- A. netstat
- B. ifconfig
- C. nslookup
- D. dig
Answer: A
Explanation:
Thenetstatcommand in Linux displays active network connections, listening ports, and network statistics. It is useful for diagnosing network issues and identifying open connections.
* nslookupis for DNS queries.
* digprovides DNS information, not network connection status.
* ifconfigshows network interface details but does not list active connections.
NEW QUESTION # 42
An organization is the victim of an attack in which an attacker gains unauthorized access to a computer to steal information and forward it via the internet to another attacker.
What is the purpose of this attack?
- A. Denial of availability
- B. Launch point
- C. Data export
- D. Data modification
Answer: C
Explanation:
This scenario describes adata exportattack, where an attacker steals sensitive information (e.g., personal data, trade secrets, or financial records) and transfers it to another entity, often for malicious purposes.
* Launch pointrefers to using a compromised system for further attacks.
* Denial of availabilitydisrupts access to resources.
* Data modificationinvolves unauthorized changes rather than theft.
NEW QUESTION # 43
An attacker sends emails claiming that an online account has been locked. The email provides a fake link with the goal of tricking users into providing login credentials.
Which malicious attack strategy is represented in the scenario?
- A. Session hijacking
- B. Phishing
- C. IP address spoofing
- D. Man-in-the-middle attack
Answer: B
Explanation:
Phishingis a cyberattack where attackers impersonate legitimate entities (e.g., banks, companies) and send fraudulent emails or messages designed to trick recipients into revealing sensitive information, such as usernames, passwords, or financial details. The fake link in the email directs victims to a malicious site that captures their credentials.
* IP address spoofingdisguises a system's identity but does not involve email deception.
* Session hijackingtakes over an active session but does not involve email scams.
* Man-in-the-middle attackintercepts communication rather than tricking users via emails.
NEW QUESTION # 44
A computer network has software that tracks successful and unsuccessful connection attempts to the network in order to better identify attacks.
Which network security concept does this scenario address?
- A. Availability
- B. Accounting
- C. Authentication
- D. Authorization
Answer: B
Explanation:
Accounting(also known asauditing or logging) is a network security concept that tracks user activities, includingsuccessful and failed authentication attempts, system changes, and resource access. This helps in detecting and mitigating security breaches.
* Authenticationverifies user identity but does not track activity.
* Availabilityensures systems remain operational.
* Authorizationcontrols user permissions but does not log activities.
NEW QUESTION # 45
Users of a network have been experiencing issues. In the course of troubleshooting, an administrator wants to test DNS resolution against a host.
Which command in Linux should be used for this purpose?
- A. ifconfig
- B. netstat
- C. traceroute
- D. dig
Answer: D
Explanation:
Thedigcommand in Linux is used for DNS troubleshooting. It queries DNS records and provides detailed information about domain name resolutions.
* traceroutetracks the path packets take to a destination but does not diagnose DNS.
* netstatlists active connections, not DNS records.
* ifconfigis used for managing network interfaces.
NEW QUESTION # 46
A company wants to implement a cloud service to obtain access to virtual machines. The company wants to be able to choose the operating systems and configure each of the machines.
What is the type of cloud service model that fits the needs of this company?
- A. Platform as a Service (PaaS)
- B. Function as a Service (FaaS)
- C. Infrastructure as a Service (IaaS)
- D. Software as a Service (SaaS)
Answer: C
Explanation:
Infrastructure as a Service (IaaS)provides virtualized computing resources over the cloud, including virtual machines where users can install and configure their own operating systems and applications. It offers flexibility and scalability without requiring hardware investment. Examples include AWS EC2 and Microsoft Azure Virtual Machines.
* FaaSexecutes small code functions without infrastructure management.
* PaaSprovides a managed platform but not full OS control.
* SaaSoffers ready-to-use applications without infrastructure control.
NEW QUESTION # 47
Which scenario demonstrates a violation of the integrity component of the CIA triad?
- A. A company has an unacceptably high network downtime during high-traffic time periods.
- B. A company stores sensitive customer data without access controls.
- C. A network's domain name system server has not been fully operational for one month.
- D. An employee accidentally modified a customer account incorrectly.
Answer: D
Explanation:
A violation ofintegrityoccurs whendata is modified incorrectly, whether intentionally or by accident. In this case, anemployee modifying a customer account incorrectlydemonstrates a breach of data integrity.
* A and Crelate toavailability, as they describe system downtime.
* Drelates toconfidentiality, as it describes improper data protection.
NEW QUESTION # 48
......
Dumps of Network-and-Security-Foundation Cover all the requirements of the Real Exam: https://www.troytecdumps.com/Network-and-Security-Foundation-troytec-exam-dumps.html
Correct Practice Tests of Network-and-Security-Foundation Dumps with Practice Exam: https://drive.google.com/open?id=187V0lfYoViWBWSAiA7qEuo_m_JExXjQI