[Jan-2026] WGU Network-and-Security-Foundation Dumps – Reduce Your Chance of Failure in Network-and-Security-Foundation Exam
To help you achieve your ultimate goal, we suggest the actual WGU Network-and-Security-Foundation dumps for your Network-and-Security-Foundation exam preparation to use as your guideline.
NEW QUESTION # 11
An organization does not have controls in place to limit employee access to sensitive customer data.
What is a component of the CIA triad that is violated?
- A. Interpretation
- B. Integrity
- C. Confidentiality
- D. Availability
Answer: C
Explanation:
Confidentialityensures that only authorized users have access to sensitive information. Without proper access controls, employees may be able to view or modify sensitive data without proper authorization, leading to a confidentiality breach.
* Integrityinvolves protecting data from unauthorized modifications.
* Availabilityensures that systems remain operational.
* Interpretationis not part of the CIA triad.
NEW QUESTION # 12
A host is already set up with an operating system. An administrator wants to install a hypervisor atop the operating system to allow for setting up virtual machines.
Which hypervisor should be used?
- A. Type 1
- B. Type 2
- C. Proprietary
- D. Open source
Answer: B
NEW QUESTION # 13
A company is specifically worried about buffer overflow attacks.
Which strategy should be used as a mitigation against this type of attack?
- A. Detect code vulnerabilities
- B. Disable caching
- C. Implement intrusion protection software
- D. Use server-side validation
Answer: A
Explanation:
Detecting code vulnerabilitiesthroughregular security audits, code reviews, and static analysis toolshelps prevent buffer overflow attacks. Developers should implementbounds checking,memory-safe programming languages, and input validationto mitigate risks.
* Disabling cachingdoes not prevent buffer overflow attacks.
* Server-side validationhelps with input security but does not directly address buffer overflows.
* Intrusion protection softwaremay detect attacks but does not prevent vulnerabilities in code.
NEW QUESTION # 14
Users of a network have been experiencing issues. In the course of troubleshooting, an administrator wants to test DNS resolution against a host.
Which command in Linux should be used for this purpose?
- A. dig
- B. netstat
- C. traceroute
- D. ifconfig
Answer: A
Explanation:
Thedigcommand in Linux is used for DNS troubleshooting. It queries DNS records and provides detailed information about domain name resolutions.
* traceroutetracks the path packets take to a destination but does not diagnose DNS.
* netstatlists active connections, not DNS records.
* ifconfigis used for managing network interfaces.
NEW QUESTION # 15
Which CIA triad component is a driver for enabling role-based access controls?
- A. Integrity
- B. Consistency
- C. Confidentiality
- D. Availability
Answer: C
Explanation:
Confidentialityensures that sensitive information is only accessible to authorized individuals.Role-Based Access Control (RBAC)enforces confidentiality by restricting access based on a user's role within an organization, ensuring that only authorized users can view or modify certain data.
* Integrityensures data is not altered improperly.
* Availabilityensures access to resources but does not manage permissions.
* Consistencyis not a CIA triad component.
NEW QUESTION # 16
What is an IT infrastructure security tenet of the CIA triad that counters passive attacks that aim to steal or intercept data?
- A. Adaptation
- B. Integrity
- C. Confidentiality
- D. Availability
Answer: C
Explanation:
Confidentialityprotects data from unauthorized access, includingpassive attackslike eavesdropping, wiretapping, and packet sniffing. Encryption, access controls, and secure authentication mechanisms help enforce confidentiality.
* Availabilityensures uptime and system accessibility.
* Integrityensures data accuracy but does not prevent interception.
* Adaptationis not part of the CIA triad.
NEW QUESTION # 17
An organization is the victim of an attack in which an attacker uses a forged employee ID card to deceive a company employee into providing sensitive information.
What is the type of cyberattack described in this scenario?
- A. Man-in-the-middle attack
- B. Social engineering
- C. Brute-force attack
- D. Pharming
Answer: B
Explanation:
Social engineeringinvolves manipulating people into divulging confidential information, often by impersonation, deception, or psychological tactics. Using aforged ID cardto gain trust and extract sensitive information is a classic example of social engineering.
* Brute-force attackattempts to guess passwords through automated methods.
* Man-in-the-middle attackintercepts communication but does not rely on deception.
* Pharmingtricks users into visiting fraudulent websites but does not involve impersonation.
NEW QUESTION # 18
A company wants to implement virtual machines with a focus on security and efficiency.
Which type of hypervisor fits the need described in the scenario?
- A. Proprietary
- B. Type 1
- C. Open source
- D. Type 2
Answer: B
Explanation:
AType 1 hypervisor(bare-metal hypervisor) runs directly on the hardware, providing better security and efficiency compared to Type 2 hypervisors. It reduces attack surfaces and optimizes resource utilization.
Examples include VMware ESXi and Microsoft Hyper-V.
* Type 2 hypervisorsrely on a host OS, making them less secure and efficient.
* Open-source and proprietarydescribe licensing models, not hypervisor types.
NEW QUESTION # 19
An attacker changes a computer's identification to appear as an authorized computer in a target network.
Which type of cyberattack is described?
- A. IP address spoofing
- B. Man-in-the-middle attack
- C. Session hijacking
- D. Pharming
Answer: A
Explanation:
IP address spoofingis a cyberattack where an attacker disguises their system by falsifying its IP address, making it appear as a trusted device in a network. This technique is used for bypassing security controls, launching denial-of-service (DoS) attacks, or impersonating legitimate users.
* Pharmingredirects users to fake websites to steal credentials.
* Man-in-the-middle attackintercepts communications between two parties.
* Session hijackingtakes over an active session but does not involve falsifying an IP address.
NEW QUESTION # 20
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Implement a bus topology
- B. Implement wired equivalent privacy (WEP)
- C. Configure RADIUS authentication
- D. Avoid the use of asymmetric encryption
Answer: C
Explanation:
Configuring RADIUS authenticationenhances Wi-Fi security by requiring user authentication before granting access to the network. This prevents unauthorized users from connecting and mitigates risks from rogue access points.
* WEPis outdated and insecure; WPA2/WPA3 with RADIUS should be used instead.
* A bus topologyis a network design choice, not a security measure.
* Avoiding asymmetric encryptionweakens security rather than improving it.
NEW QUESTION # 21
A company has a legacy network in which all devices receive all messages transmitted by a central wire.
Which network topology is described?
- A. Point-to-point
- B. Bus
- C. Ring
- D. Star
Answer: B
Explanation:
ABus topologyis a network setup in which all devices share a single communication channel (central wire), and data is transmitted along this cable. Each device listens for data but only processes packets addressed to it.
This topology was widely used in older Ethernet networks.
* Star topologyuses a central switch or hub, not a shared wire.
* Point-to-point topologyinvolves a direct link between two devices, not multiple devices sharing a medium.
* Ring topologyconnects each device to two adjacent devices in a circular path, not a single shared bus.
NEW QUESTION # 22
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Add more access points
- B. Disable ESSID broadcasting
- C. Trust local hosts by default
- D. Implement wired equivalent privacy (WEP)
Answer: B
Explanation:
Disabling ESSID broadcastingprevents the Wi-Fi network name from being publicly visible,making it harder for attackers to discover and target the network. While this is not a foolproof security measure, it adds an additional layer of protection against unauthorized access.
* Trusting local hosts by defaultis risky and not a security best practice.
* Adding more access pointsimproves coverage but does not enhance security.
* WEPis outdated and highly vulnerable to attacks; WPA2 or WPA3 should be used instead.
NEW QUESTION # 23
In the process of setting up a Linux-based network system, a technician needs to determine if there is connectivity to a hostname.
Which command should be used?
- A. dig
- B. nslookup
- C. ping
- D. ifconfig
Answer: C
Explanation:
Thepingcommand in Linux is used to check network connectivity to a specific hostname or IP address. It sends ICMP Echo Request packets and measures response times.
* nslookupis used for DNS lookups, not connectivity testing.
* ifconfigdisplays network interface configurations but does not test connectivity.
* digis used for detailed DNS queries.
NEW QUESTION # 24
An organization has experienced rogue access points in the past and wants to take actions to mitigate this type of attack.
What should this organization do?
- A. Disallow ICMP packets on the firewall
- B. Use monitor mode scanning
- C. Require complex passwords
- D. Use server-side validation
Answer: B
Explanation:
Monitor mode scanningallows administrators to detect unauthorized or rogue access points broadcasting in the network. This technique, along withwireless intrusion detection systems (WIDS), helps identify and block unauthorized devices.
* Requiring complex passwordsenhances security but does not prevent rogue APs.
* Server-side validationsecures applications, not wireless networks.
* Disallowing ICMP packetsis a security measure but does not address rogue APs.
NEW QUESTION # 25
A company is developing a data protection methodology in order to improve data protection measures.
What is a strategy that should be used?
- A. Increase wireless access point range
- B. Use a variable network topology
- C. Implement wired equivalent privacy (WEP)
- D. Enhance physical resource security
Answer: D
Explanation:
Enhancing physical resource securityensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.
* Using a variable network topologydoes not directly protect data.
* Increasing wireless access point rangemay improve connectivity but does not enhance security.
* WEPis weak and should not be used for data protection.
NEW QUESTION # 26
An attacker uses a list of commonly used access credentials to attempt to gain access to an online account.
Which malicious attack strategy is represented in the scenario?
- A. Dictionary attack
- B. Credential stuffing
- C. Phishing
- D. Social engineering
Answer: A
Explanation:
Adictionary attackis a password-cracking method that systematically tries common words, phrases, and predictable passwords (e.g., "password123", "admin2024") to gain access to an account. Attackers often compile large lists of weak or reused passwords.
* Phishingtricks users into revealing passwords but does not systematically test multiple words.
* Credential stuffinguses breached passwords rather than guessing from a list.
* Social engineeringmanipulates users but does not rely on automated password attempts.
NEW QUESTION # 27
A company is designing an information system and is maintaining a focus on the user experience and resulting productivity rather than on the technology itself.
What is the security principle implemented in this scenario?
- A. Human-centeredness
- B. Fail-safe
- C. Least common mechanism
- D. Zero-trust model
Answer: A
Explanation:
Human-centerednessin security design prioritizesuser experience and productivitywhile implementing security measures. It ensures that security policies are intuitive and do not excessively burden users, reducing resistance to security compliance.
* Least common mechanismminimizes shared resources to enhance security.
* Fail-safeensures secure defaults in case of system failure.
* Zero-trust modelassumes no inherent trust in users or devices.
NEW QUESTION # 28
A person is troubleshooting a network issue and needs to see details about network adapters and their settings.
Which Windows command should be used?
- A. ipconfig
- B. netstat
- C. traceroute
- D. nslookup
Answer: A
Explanation:
Theipconfigcommand in Windows provides details about a computer's network adapters, including IP addresses, subnet masks, default gateways, and DNS settings. It is particularly useful for troubleshooting connectivity issues.
* traceroute(or tracert in Windows) is used to trace the path packets take to a destination.
* nslookupis used for querying DNS records.
* netstatprovides details about active network connections and listening ports, but not adapter configurations.
NEW QUESTION # 29
With expanded business opportunities and markets, a company needs to comply with theGeneral Data Protection Regulation (GDPR).
Which requirement should be expected for the company under this regulation?
- A. Allow individuals to access, collect, or erase their personal information
- B. Disclose the software used to protect personal data
- C. Notify individuals each time their personal information is viewed
- D. Compensate individuals for revenue from the sale of their information
Answer: A
Explanation:
UnderGDPR, individuals have the right to:
* Accesstheir personal data
* Request modifications or deletions(right to be forgotten)
* Restrict processing of their data
Companies must also ensuretransparency and data protectionby implementing encryption and security controls.
* Compensating individualsis not a GDPR requirement.
* Disclosing security softwareis not mandatory, only security measures in place.
* Notifying individuals every time data is viewedis unnecessary unless required by a breach.
NEW QUESTION # 30
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?
- A. Integrity
- B. Availability
- C. Innovation
- D. Confidentiality
Answer: B
Explanation:
Availabilityensures that systems and data remain accessible and operational, even in the event of failures or attacks. Adisaster recovery plan (DRP)focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
* Confidentialityfocuses on restricting unauthorized access.
* Integrityensures data remains unaltered, but does not address service continuity.
* Innovationis unrelated to the CIA triad.
NEW QUESTION # 31
Which layer of the OSI model includes HTTP?
- A. Network
- B. Application
- C. Transport
- D. Session
Answer: B
Explanation:
TheApplication layer(Layer 7 of the OSI model) includesHypertext Transfer Protocol (HTTP), which is used for web communication. This layer provides network services directly to applications and users.
* Network layerdeals with IP addressing and packet routing.
* Session layermanages connections but does not include HTTP.
* Transport layerensures reliable data transmission but does not handle application protocols.
NEW QUESTION # 32
An individual has been tasked with setting up an office network. During the process, there is a need for a device that extends the range of a network.
Which device should be used?
- A. Switch
- B. Access point
- C. Router
- D. Server
Answer: B
Explanation:
Anaccess point (AP)is a network device that extends the coverage of a wireless network by acting as a bridge between wired and wireless devices. It allows users to connect to a network without needing a direct wired connection. APs are particularly useful in large office spaces where Wi-Fi signals may not reach all areas.
* Routersprimarily manage network traffic but do not directly extend network range unless they include built-in AP functionality.
* Serversare used for hosting applications and storing data but do not extend network connectivity.
* Switchesconnect wired devices within a local network but do not extend wireless network range.
NEW QUESTION # 33
An attacker uses a poisoned domain name on the domain name server to navigate users to the attacker's site.
Which malicious attack strategy is represented in the scenario?
- A. Pharming
- B. IP address spoofing
- C. Session hijacking
- D. Brute-force attack
Answer: A
Explanation:
Pharmingis an attack that manipulates theDomain Name System (DNS)to redirect users to fraudulent websites without their knowledge. Attackers poison DNS records or compromise routers to reroute traffic to malicious sites designed to steal information.
* Brute-force attackinvolves password guessing, not domain manipulation.
* IP address spoofingdisguises a device's identity but does not alter DNS records.
* Session hijackingtakes over active user sessions but does not redirect websites.
NEW QUESTION # 34
After a series of attacks, an organization needs to bolster its data protection measures.
Which strategy should be used to increase data protection?
- A. Require that passwords change weekly
- B. Use a variable network topology
- C. Implement wired equivalent privacy (WEP)
- D. Have restoration policies in place
Answer: D
Explanation:
Having restoration policies in placeensures that in the event of data breaches, ransomware, or system failures, data can be quickly restored from secure backups. This minimizes downtime and data loss.
* Using a variable network topologydoes not directly improve data security.
* Changing passwords weeklymay lead to weaker security due to password fatigue.
* WEPis obsolete and does not provide strong encryption for data protection.
NEW QUESTION # 35
An organization is the victim of an attack in which an attacker intercepts messages between two parties before transferring them to the correct destination.
What is the type of cyberattack described in this scenario?
- A. Man-in-the-middle attack
- B. Credential stuffing
- C. Social engineering
- D. Pharming
Answer: A
Explanation:
Aman-in-the-middle (MITM) attackoccurs when an attacker secretly intercepts and relays communication between two parties. This allows the attacker to steal data, modify messages, or inject malicious content without the victims' knowledge.
* Credential stuffingreuses stolen login credentials but does not involve interception.
* Social engineeringmanipulates users rather than intercepting messages.
* Pharmingredirects users to fraudulent websites, but it does not intercept communication.
NEW QUESTION # 36
......
100% Free Network-and-Security-Foundation Demo-Trial [Pdf], get it now: https://drive.google.com/open?id=1a4z1hkPvqdgGTPbb5ueequmOwdur9m74
Accurate & Verified Answers As Seen in the Real Exam here: https://www.passtorrent.com/Network-and-Security-Foundation-latest-torrent.html