Network-and-Security-Foundation 100% Guarantee Download Network-and-Security-Foundation Exam PDF Q&A [Dec 21, 2025]
Get Network-and-Security-Foundation Actual Free Exam Q&As to Prepare for Your WGU Certification
NEW QUESTION # 22
Which statement describes the Integrity tenet of IT security?
- A. It requires that network applications be accessible to users.
- B. It requires the encryption of sensitive data transmission.
- C. It involves transmitting network data without any errors.
- D. It involves keeping systems accessible for network users.
Answer: C
Explanation:
Integrityin IT security ensures that data remains accurate, unaltered, and trustworthy throughout its lifecycle.
This means that data transmission should occurwithout errorsand should not be modified by unauthorized parties. Mechanisms like checksums, hashing, and digital signatures help maintain integrity.
* Encryption (B)enhances confidentiality, not integrity.
* Accessibility (C and D)relates to availability, not integrity.
NEW QUESTION # 23
An attacker issues commands to access a file on a network drive and overwrite it with new data.
What is the purpose of the attack?
- A. Launch point
- B. Denial of availability
- C. Data modification
- D. Data export
Answer: C
Explanation:
Data modification attacksinvolve unauthorized changes to stored data, altering information to mislead, disrupt, or destroy integrity. Attackers may modify logs, transactions, or records for fraud or sabotage.
* Launch pointis when a system is used to attack others.
* Data exportis the theft of data.
* Denial of availabilitymakes data inaccessible, but does not necessarily modify it.
NEW QUESTION # 24
In order to reduce the risk of insider attacks, a company assigns role-based permissions to its users.
Which network security concept does this scenario address?
- A. Authentication
- B. Accounting
- C. Availability
- D. Authorization
Answer: D
Explanation:
Authorizationis the process of granting specific access rights and permissions based on user roles. By implementingRole-Based Access Control (RBAC), organizations ensure that users only have access to resources necessary for their job functions, reducing the risk of insider threats.
* Authenticationverifies identity but does not control access.
* Accountinglogs activities but does not restrict access.
* Availabilityensures system uptime but is unrelated to permissions.
NEW QUESTION # 25
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?
- A. Integrity
- B. Confidentiality
- C. Innovation
- D. Availability
Answer: D
Explanation:
Availabilityensures that systems and data remain accessible and operational, even in the event of failures or attacks. Adisaster recovery plan (DRP)focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
* Confidentialityfocuses on restricting unauthorized access.
* Integrityensures data remains unaltered, but does not address service continuity.
* Innovationis unrelated to the CIA triad.
NEW QUESTION # 26
A person is troubleshooting a network issue and needs to see a list of all active network connections.
Which Linux command should be used?
- A. netstat
- B. dig
- C. nslookup
- D. ifconfig
Answer: A
Explanation:
Thenetstatcommand in Linux displays active network connections, listening ports, and network statistics. It is useful for diagnosing network issues and identifying open connections.
* nslookupis for DNS queries.
* digprovides DNS information, not network connection status.
* ifconfigshows network interface details but does not list active connections.
NEW QUESTION # 27
After a series of attacks, an organization needs to bolster its data protection measures.
Which strategy should be used to increase data protection?
- A. Require that passwords change weekly
- B. Have restoration policies in place
- C. Implement wired equivalent privacy (WEP)
- D. Use a variable network topology
Answer: B
Explanation:
Having restoration policies in placeensures that in the event of data breaches, ransomware, or system failures, data can be quickly restored from secure backups. This minimizes downtime and data loss.
* Using a variable network topologydoes not directly improve data security.
* Changing passwords weeklymay lead to weaker security due to password fatigue.
* WEPis obsolete and does not provide strong encryption for data protection.
NEW QUESTION # 28
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Implement a bus topology
- B. Implement wired equivalent privacy (WEP)
- C. Avoid the use of asymmetric encryption
- D. Configure RADIUS authentication
Answer: D
Explanation:
Configuring RADIUS authenticationenhances Wi-Fi security by requiring user authentication before granting access to the network. This prevents unauthorized users from connecting and mitigates risks from rogue access points.
* WEPis outdated and insecure; WPA2/WPA3 with RADIUS should be used instead.
* A bus topologyis a network design choice, not a security measure.
* Avoiding asymmetric encryptionweakens security rather than improving it.
NEW QUESTION # 29
An attacker uses a network device to take over an existing connection between two network computers.
Which malicious attack strategy is represented in the scenario?
- A. Social engineering
- B. IP address spoofing
- C. Session hijacking
- D. Dictionary attack
Answer: C
Explanation:
Session hijackingoccurs when an attacker takes over an established connection between two devices, often by stealing session tokens or manipulating network traffic. This allows the attacker to impersonate a legitimate user and gain unauthorized access.
* Dictionary attackinvolves password guessing, not hijacking active connections.
* Social engineeringtricks users into providing information but does not hijack sessions.
* IP address spoofingdisguises the attacker's identity but does not necessarily take over a session.
NEW QUESTION # 30
An attacker sends emails claiming that an online account has been locked. The email provides a fake link with the goal of tricking users into providing login credentials.
Which malicious attack strategy is represented in the scenario?
- A. Man-in-the-middle attack
- B. Session hijacking
- C. IP address spoofing
- D. Phishing
Answer: D
Explanation:
Phishingis a cyberattack where attackers impersonate legitimate entities (e.g., banks, companies) and send fraudulent emails or messages designed to trick recipients into revealing sensitive information, such as usernames, passwords, or financial details. The fake link in the email directs victims to a malicious site that captures their credentials.
* IP address spoofingdisguises a system's identity but does not involve email deception.
* Session hijackingtakes over an active session but does not involve email scams.
* Man-in-the-middle attackintercepts communication rather than tricking users via emails.
NEW QUESTION # 31
A person is troubleshooting a network issue and needs to see details about network adapters and their settings.
Which Windows command should be used?
- A. ipconfig
- B. netstat
- C. nslookup
- D. traceroute
Answer: A
Explanation:
Theipconfigcommand in Windows provides details about a computer's network adapters, including IP addresses, subnet masks, default gateways, and DNS settings. It is particularly useful for troubleshooting connectivity issues.
* traceroute(or tracert in Windows) is used to trace the path packets take to a destination.
* nslookupis used for querying DNS records.
* netstatprovides details about active network connections and listening ports, but not adapter configurations.
NEW QUESTION # 32
An organization is the victim of an attack in which an attacker intercepts messages between two parties before transferring them to the correct destination.
What is the type of cyberattack described in this scenario?
- A. Credential stuffing
- B. Social engineering
- C. Man-in-the-middle attack
- D. Pharming
Answer: C
Explanation:
Aman-in-the-middle (MITM) attackoccurs when an attacker secretly intercepts and relays communication between two parties. This allows the attacker to steal data, modify messages, or inject malicious content without the victims' knowledge.
* Credential stuffingreuses stolen login credentials but does not involve interception.
* Social engineeringmanipulates users rather than intercepting messages.
* Pharmingredirects users to fraudulent websites, but it does not intercept communication.
NEW QUESTION # 33
What is an IT infrastructure security tenet of the CIA triad that counters passive attacks that aim to steal or intercept data?
- A. Availability
- B. Adaptation
- C. Integrity
- D. Confidentiality
Answer: D
Explanation:
Confidentialityprotects data from unauthorized access, includingpassive attackslike eavesdropping, wiretapping, and packet sniffing. Encryption, access controls, and secure authentication mechanisms help enforce confidentiality.
* Availabilityensures uptime and system accessibility.
* Integrityensures data accuracy but does not prevent interception.
* Adaptationis not part of the CIA triad.
NEW QUESTION # 34
A developer is using shared functions for software code in order to reduce complexity, knowing that greater complexity and volume of code are harder to defend against attacks.
Which security principle is demonstrated in this scenario?
- A. Economy of mechanism
- B. Zero-trust model
- C. Least privilege
- D. Least common mechanism
Answer: A
Explanation:
Theeconomy of mechanismprinciple states that security systems should beas simple and small as possible.
Reducing complexity makes security mechanisms easier to understand, audit, and defend against attacks.
* Least common mechanismreduces shared resources to limit security risks.
* Least privilegerestricts access based on necessity.
* Zero-trust modelassumes no implicit trust in users or devices.
NEW QUESTION # 35
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Trust local hosts by default
- B. Implement wired equivalent privacy (WEP)
- C. Add more access points
- D. Disable ESSID broadcasting
Answer: D
Explanation:
Disabling ESSID broadcastingprevents the Wi-Fi network name from being publicly visible,making it harder for attackers to discover and target the network. While this is not a foolproof security measure, it adds an additional layer of protection against unauthorized access.
* Trusting local hosts by defaultis risky and not a security best practice.
* Adding more access pointsimproves coverage but does not enhance security.
* WEPis outdated and highly vulnerable to attacks; WPA2 or WPA3 should be used instead.
NEW QUESTION # 36
A company is ensuring that its network protocol meets encryption standards.
What is the CIA triad component targeted in the scenario?
- A. Availability
- B. Integrity
- C. Consistency
- D. Confidentiality
Answer: D
Explanation:
Confidentialityin IT security ensures that sensitive data remains private and protected from unauthorized access. Encryption is a key measure used to maintain confidentiality by encoding data so that only authorized users can access it.
* Integrityensures that data remains accurate and unchanged.
* Availabilityensures that data is accessible when needed.
* Consistencyis not a component of the CIA triad.
NEW QUESTION # 37
A company is developing a data protection methodology in order to improve data protection measures.
What is a strategy that should be used?
- A. Increase wireless access point range
- B. Enhance physical resource security
- C. Implement wired equivalent privacy (WEP)
- D. Use a variable network topology
Answer: B
Explanation:
Enhancing physical resource securityensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.
* Using a variable network topologydoes not directly protect data.
* Increasing wireless access point rangemay improve connectivity but does not enhance security.
* WEPis weak and should not be used for data protection.
NEW QUESTION # 38
......
Network-and-Security-Foundation Questions Truly Valid For Your WGU Exam: https://www.actualtestsquiz.com/Network-and-Security-Foundation-test-torrent.html
WGU Actual Free Exam Questions And Answers: https://drive.google.com/open?id=15EnfvvrJGhgHOY08o04e0vW8bu9ExPwa
