Achive your Success with Latest WGU Network-and-Security-Foundation Exam [Jan 13, 2026]
The Network-and-Security-Foundation Exam Test For Brief Preparation
NEW QUESTION # 33
After recently experiencing a security breach, a company is working on improving its database security. As a part of its security governance strategies, the company is developing a database security checklist.
Which component is important to include in this checklist?
- A. Restricting physical access to locations where data is housed
- B. Disclosing any instances of breaches of personal data
- C. Outsourcing data management to third-party vendors
- D. Developing algorithms for secure access to data
Answer: A
Explanation:
Restricting physical accessto data storage facilities is a critical part of database security. Even with strong cybersecurity measures,unauthorized physical accessto servers can lead to breaches. Security strategies includebiometric authentication, surveillance cameras, and restricted entry zones.
* Disclosing breachesis required by compliance laws but does not protect data proactively.
* Developing algorithmsimproves security but is not a fundamental checklist item.
* Outsourcing data managementcan introduce security risks if not properly controlled.
NEW QUESTION # 34
Which layer of the OSI model includes the TCP?
- A. Network
- B. Session
- C. Transport
- D. Application
Answer: C
Explanation:
TheTransport layer(Layer 4 of the OSI model) includes theTransmission Control Protocol (TCP), which provides reliable, connection-oriented communication. TCP ensures error-checking, sequencing, and retransmission of lost packets.
* Application layerdeals with end-user protocols like HTTP and FTP.
* Session layermanages communication sessions but not transport protocols.
* Network layerfocuses on IP addressing and routing, not transport mechanisms.
NEW QUESTION # 35
An attacker uses a poisoned domain name on the domain name server to navigate users to the attacker's site.
Which malicious attack strategy is represented in the scenario?
- A. IP address spoofing
- B. Session hijacking
- C. Pharming
- D. Brute-force attack
Answer: C
Explanation:
Pharmingis an attack that manipulates theDomain Name System (DNS)to redirect users to fraudulent websites without their knowledge. Attackers poison DNS records or compromise routers to reroute traffic to malicious sites designed to steal information.
* Brute-force attackinvolves password guessing, not domain manipulation.
* IP address spoofingdisguises a device's identity but does not alter DNS records.
* Session hijackingtakes over active user sessions but does not redirect websites.
NEW QUESTION # 36
A company grants users permissions based on the department in which users work.
Which type of access control is involved?
- A. Role-based
- B. Attribute-based
- C. Discretionary
- D. Context-based
Answer: A
Explanation:
Role-Based Access Control (RBAC)assigns permissions based on a user's role within an organization, such as department, job function, or hierarchy. This ensures that usersonly have access to resources necessary for their duties.
* Attribute-based access control (ABAC)considers dynamic attributes like time, location, and device.
* Context-based access controlrestricts access based on environmental conditions.
* Discretionary access control (DAC)allows data owners to determine access rights.
NEW QUESTION # 37
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Configure RADIUS authentication
- B. Implement wired equivalent privacy (WEP)
- C. Avoid the use of asymmetric encryption
- D. Implement a bus topology
Answer: A
Explanation:
Configuring RADIUS authenticationenhances Wi-Fi security by requiring user authentication before granting access to the network. This prevents unauthorized users from connecting and mitigates risks from rogue access points.
* WEPis outdated and insecure; WPA2/WPA3 with RADIUS should be used instead.
* A bus topologyis a network design choice, not a security measure.
* Avoiding asymmetric encryptionweakens security rather than improving it.
NEW QUESTION # 38
An organization has experienced a series of data breaches and needs to ensure that data remains protected even if intercepted.
Which security measure should be implemented?
- A. Two-factor authentication (2FA)
- B. Role-based access control (RBAC)
- C. Patch management
- D. Data encryption
Answer: D
Explanation:
Data encryptionprotects sensitive information by encoding it into an unreadable format, ensuring that even if attackers intercept the data, they cannot decipher it without the proper decryption key. This is crucial for protecting stored and transmitted data.
* RBACcontrols user access but does not secure data in transit.
* 2FAstrengthens authentication but does not secure stored or transmitted data.
* Patch managementfixes software vulnerabilities but does not directly protect intercepted data.
NEW QUESTION # 39
An individual has been tasked with setting up an office network. During the process, there is a need for a device that extends the range of a network.
Which device should be used?
- A. Access point
- B. Router
- C. Switch
- D. Server
Answer: A
Explanation:
Anaccess point (AP)is a network device that extends the coverage of a wireless network by acting as a bridge between wired and wireless devices. It allows users to connect to a network without needing a direct wired connection. APs are particularly useful in large office spaces where Wi-Fi signals may not reach all areas.
* Routersprimarily manage network traffic but do not directly extend network range unless they include built-in AP functionality.
* Serversare used for hosting applications and storing data but do not extend network connectivity.
* Switchesconnect wired devices within a local network but do not extend wireless network range.
NEW QUESTION # 40
Which layer of the TCP/IP model includes the Internet Protocol (IP)?
- A. Application
- B. Network or internet
- C. Transport
- D. Physical or network access
Answer: B
Explanation:
TheNetwork or Internet layerof the TCP/IP model is responsible for addressing, routing, and delivering packets across networks. TheInternet Protocol (IP)operates at this layer, ensuring thatdata is correctly routed from the source to the destination.
* Physical or network access layerdeals with hardware transmission (e.g., Ethernet, Wi-Fi).
* Application layerincludes end-user services (e.g., HTTP, FTP).
* Transport layermanages data flow using protocols like TCP and UDP but does not handle IP addressing.
NEW QUESTION # 41
An organization has experienced injection attacks in the past and wants to take actions to mitigate this type of attack.
What should this organization do?
- A. Use server-side validation
- B. Use Wi-Fi Protected Access 2 (WPA2)
- C. Decrease the wireless range
- D. Detect code vulnerabilities
Answer: A
Explanation:
Server-side validationhelps preventSQL injection, command injection, and other input-based attacksby ensuring that user input is properly sanitized before being processed by the system.Parameterized queries and input validationshould also be implemented to further reduce risk.
* Detecting code vulnerabilitiesis helpful but not a direct mitigation technique.
* Decreasing wireless rangedoes not affect injection attacks.
* Using WPA2secures wireless networks but does not prevent injection attacks.
NEW QUESTION # 42
An organization is the victim of an attack in which an attacker intercepts messages between two parties before transferring them to the correct destination.
What is the type of cyberattack described in this scenario?
- A. Social engineering
- B. Man-in-the-middle attack
- C. Pharming
- D. Credential stuffing
Answer: B
Explanation:
Aman-in-the-middle (MITM) attackoccurs when an attacker secretly intercepts and relays communication between two parties. This allows the attacker to steal data, modify messages, or inject malicious content without the victims' knowledge.
* Credential stuffingreuses stolen login credentials but does not involve interception.
* Social engineeringmanipulates users rather than intercepting messages.
* Pharmingredirects users to fraudulent websites, but it does not intercept communication.
NEW QUESTION # 43
Which statement describes the Integrity tenet of IT security?
- A. It requires that network applications be accessible to users.
- B. It involves keeping systems accessible for network users.
- C. It involves transmitting network data without any errors.
- D. It requires the encryption of sensitive data transmission.
Answer: C
Explanation:
Integrityin IT security ensures that data remains accurate, unaltered, and trustworthy throughout its lifecycle.
This means that data transmission should occurwithout errorsand should not be modified by unauthorized parties. Mechanisms like checksums, hashing, and digital signatures help maintain integrity.
* Encryption (B)enhances confidentiality, not integrity.
* Accessibility (C and D)relates to availability, not integrity.
NEW QUESTION # 44
An organization has experienced rogue access points in the past and wants to take actions to mitigate this type of attack.
What should this organization do?
- A. Use server-side validation
- B. Disallow ICMP packets on the firewall
- C. Use monitor mode scanning
- D. Require complex passwords
Answer: C
Explanation:
Monitor mode scanningallows administrators to detect unauthorized or rogue access points broadcasting in the network. This technique, along withwireless intrusion detection systems (WIDS), helps identify and block unauthorized devices.
* Requiring complex passwordsenhances security but does not prevent rogue APs.
* Server-side validationsecures applications, not wireless networks.
* Disallowing ICMP packetsis a security measure but does not address rogue APs.
NEW QUESTION # 45
Which layer of the OSI model includes the ICMP?
- A. Session
- B. Network
- C. Application
- D. Transport
Answer: B
Explanation:
TheNetwork layer(Layer 3 of the OSI model) includes theInternet Control Message Protocol (ICMP), which is used for network diagnostics (e.g.,pingcommand). ICMP helps in error reporting and network troubleshooting.
* Transport layerhandles reliable data delivery (e.g., TCP, UDP).
* Session layermanages communication sessions.
* Application layerprovides end-user services.
NEW QUESTION # 46
After a series of attacks, an organization needs to bolster its data protection measures.
Which strategy should be used to increase data protection?
- A. Have restoration policies in place
- B. Implement wired equivalent privacy (WEP)
- C. Require that passwords change weekly
- D. Use a variable network topology
Answer: A
Explanation:
Having restoration policies in placeensures that in the event of data breaches, ransomware, or system failures, data can be quickly restored from secure backups. This minimizes downtime and data loss.
* Using a variable network topologydoes not directly improve data security.
* Changing passwords weeklymay lead to weaker security due to password fatigue.
* WEPis obsolete and does not provide strong encryption for data protection.
NEW QUESTION # 47
A company is specifically worried about buffer overflow attacks.
Which strategy should be used as a mitigation against this type of attack?
- A. Use server-side validation
- B. Disable caching
- C. Implement intrusion protection software
- D. Detect code vulnerabilities
Answer: D
Explanation:
Detecting code vulnerabilitiesthroughregular security audits, code reviews, and static analysis toolshelps prevent buffer overflow attacks. Developers should implementbounds checking,memory-safe programming languages, and input validationto mitigate risks.
* Disabling cachingdoes not prevent buffer overflow attacks.
* Server-side validationhelps with input security but does not directly address buffer overflows.
* Intrusion protection softwaremay detect attacks but does not prevent vulnerabilities in code.
NEW QUESTION # 48
Which scenario demonstrates a violation of the integrity component of the CIA triad?
- A. A network's domain name system server has not been fully operational for one month.
- B. A company stores sensitive customer data without access controls.
- C. An employee accidentally modified a customer account incorrectly.
- D. A company has an unacceptably high network downtime during high-traffic time periods.
Answer: C
Explanation:
A violation ofintegrityoccurs whendata is modified incorrectly, whether intentionally or by accident. In this case, anemployee modifying a customer account incorrectlydemonstrates a breach of data integrity.
* A and Crelate toavailability, as they describe system downtime.
* Drelates toconfidentiality, as it describes improper data protection.
NEW QUESTION # 49
When setting up a network, a technician needs a router that connects computers together and connects computers to the internet.
Which router should be used?
- A. Core router
- B. Subscriber edge router
- C. Inter-provider border router
- D. Broadband router
Answer: D
Explanation:
A broadband router is a type of network router that connects multiple computers within a local network while also providing internet access. It functions as a gateway between the local network and the internet by handling data packet transmission and routing. Broadband routers are widely used in small offices and homes because they offer essential networking services, including DHCP, NAT, and sometimes wireless connectivity.
* Inter-provider border routersare used by ISPs to route data between different providers and do not serve as an internet gateway for end users.
* Subscriber edge routersare typically deployed at the edge of an ISP's network to connect subscriber networks but do not provide full internet routing functionalities.
* Core routersoperate at the backbone level of a network, facilitating high-speed data transfer but not connecting end-user devices directly.
NEW QUESTION # 50
An attacker changes a computer's identification to appear as an authorized computer in a target network.
Which type of cyberattack is described?
- A. Pharming
- B. Man-in-the-middle attack
- C. Session hijacking
- D. IP address spoofing
Answer: D
Explanation:
IP address spoofingis a cyberattack where an attacker disguises their system by falsifying its IP address, making it appear as a trusted device in a network. This technique is used for bypassing security controls, launching denial-of-service (DoS) attacks, or impersonating legitimate users.
* Pharmingredirects users to fake websites to steal credentials.
* Man-in-the-middle attackintercepts communications between two parties.
* Session hijackingtakes over an active session but does not involve falsifying an IP address.
NEW QUESTION # 51
A company wants to implement a cloud service to obtain access to virtual machines. The company wants to be able to choose the operating systems and configure each of the machines.
What is the type of cloud service model that fits the needs of this company?
- A. Software as a Service (SaaS)
- B. Platform as a Service (PaaS)
- C. Infrastructure as a Service (IaaS)
- D. Function as a Service (FaaS)
Answer: C
Explanation:
Infrastructure as a Service (IaaS)provides virtualized computing resources over the cloud, including virtual machines where users can install and configure their own operating systems and applications. It offers flexibility and scalability without requiring hardware investment. Examples include AWS EC2 and Microsoft Azure Virtual Machines.
* FaaSexecutes small code functions without infrastructure management.
* PaaSprovides a managed platform but not full OS control.
* SaaSoffers ready-to-use applications without infrastructure control.
NEW QUESTION # 52
A host is already set up with an operating system. An administrator wants to install a hypervisor atop the operating system to allow for setting up virtual machines.
Which hypervisor should be used?
- A. Open source
- B. Proprietary
- C. Type 1
- D. Type 2
Answer: D
Explanation:
AType 2 hypervisor(hosted hypervisor) runs on top of an existing operating system and allows for the creation of virtual machines. Examples include VMware Workstation and Oracle VirtualBox.
* Type 1 hypervisorsrun directly on hardware without an OS (e.g., VMware ESXi, Microsoft Hyper-V).
* Open-source and proprietarydescribe licensing models, not hypervisor types.
NEW QUESTION # 53
What is the component of the CIA triad for IT security that requires that IP packets be retransmitted if the receiving host has an invalid checksum value?
- A. Availability
- B. Confidentiality
- C. Integrity
- D. Consistency
Answer: C
Explanation:
Integrityin theCIA (Confidentiality, Integrity, Availability) triadensures that data is not altered in an unauthorized manner. In networking, integrity mechanisms such as checksums, message authentication codes (MACs), and digital signatures verify that transmitted data has not been tampered with. If an IP packet has an invalid checksum, the system detects corruption and requests retransmission, ensuring data integrity.
* Confidentialityprotects against unauthorized access but does not ensure data consistency.
* Availabilityensures that resources are accessible but does not verify data correctness.
* Consistencyis not a formal component of the CIA triad.
NEW QUESTION # 54
A computer network has software that tracks successful and unsuccessful connection attempts to the network in order to better identify attacks.
Which network security concept does this scenario address?
- A. Availability
- B. Accounting
- C. Authentication
- D. Authorization
Answer: B
Explanation:
Accounting(also known asauditing or logging) is a network security concept that tracks user activities, includingsuccessful and failed authentication attempts, system changes, and resource access. This helps in detecting and mitigating security breaches.
* Authenticationverifies user identity but does not track activity.
* Availabilityensures systems remain operational.
* Authorizationcontrols user permissions but does not log activities.
NEW QUESTION # 55
A host is already set up with an operating system. An administrator wants to install a hypervisor atop the operating system to allow for setting up virtual machines.
Which hypervisor should be used?
- A. Open source
- B. Proprietary
- C. Type 1
- D. Type 2
Answer: D
NEW QUESTION # 56
......
Revolutionary Guide To Exam WGU Dumps: https://www.testkingpdf.com/Network-and-Security-Foundation-testking-pdf-torrent.html
Pass Network-and-Security-Foundation Exam Latest Practice Questions: https://drive.google.com/open?id=1hEcHxpWX74OlrJpHMOCrKwm61jRGTKsB
