Get 2026 Free WGU Network-and-Security-Foundation Exam Practice Materials Collection
Get Latest and 100% Accurate Network-and-Security-Foundation Exam Questions
NEW QUESTION # 14
In the process of setting up a Linux-based network system, a technician needs to determine if there is connectivity to a hostname.
Which command should be used?
- A. ping
- B. ifconfig
- C. nslookup
- D. dig
Answer: A
Explanation:
Thepingcommand in Linux is used to check network connectivity to a specific hostname or IP address. It sends ICMP Echo Request packets and measures response times.
* nslookupis used for DNS lookups, not connectivity testing.
* ifconfigdisplays network interface configurations but does not test connectivity.
* digis used for detailed DNS queries.
NEW QUESTION # 15
When setting up a network, a technician needs a router that creates an access point.
Which router should be used?
- A. Wireless router
- B. Core router
- C. Inter-provider border router
- D. Broadband router
Answer: A
Explanation:
Awireless routeris designed to create an access point that allows wireless devices to connect to a network. It combines the functions of a traditional router with a wireless access point, enabling communication between wired and wireless devices. These routers use Wi-Fi standards (e.g., 802.11ac, 802.11ax) to transmit data wirelessly.
* Broadband routersprimarily provide internet connectivity but do not necessarily include Wi-Fi functionality unless specified.
* Core routershandle large-scale data routing in the backbone of networks but are not designed for access point creation.
* Inter-provider border routersfunction at an ISP level for routing traffic between different networks, not for providing user access.
NEW QUESTION # 16
A person is troubleshooting a network issue and needs to see a list of all active network connections.
Which Linux command should be used?
- A. netstat
- B. ifconfig
- C. nslookup
- D. dig
Answer: A
Explanation:
Thenetstatcommand in Linux displays active network connections, listening ports, and network statistics. It is useful for diagnosing network issues and identifying open connections.
* nslookupis for DNS queries.
* digprovides DNS information, not network connection status.
* ifconfigshows network interface details but does not list active connections.
NEW QUESTION # 17
Which layer of the OSI model includes the TCP?
- A. Network
- B. Session
- C. Transport
- D. Application
Answer: C
Explanation:
TheTransport layer(Layer 4 of the OSI model) includes theTransmission Control Protocol (TCP), which provides reliable, connection-oriented communication. TCP ensures error-checking, sequencing, and retransmission of lost packets.
* Application layerdeals with end-user protocols like HTTP and FTP.
* Session layermanages communication sessions but not transport protocols.
* Network layerfocuses on IP addressing and routing, not transport mechanisms.
NEW QUESTION # 18
Which layer of the OSI model includes the ICMP?
- A. Session
- B. Transport
- C. Network
- D. Application
Answer: C
Explanation:
TheNetwork layer(Layer 3 of the OSI model) includes theInternet Control Message Protocol (ICMP), which is used for network diagnostics (e.g.,pingcommand). ICMP helps in error reporting and network troubleshooting.
* Transport layerhandles reliable data delivery (e.g., TCP, UDP).
* Session layermanages communication sessions.
* Application layerprovides end-user services.
NEW QUESTION # 19
Which statement describes the Integrity tenet of IT security?
- A. It involves keeping systems accessible for network users.
- B. It involves transmitting network data without any errors.
- C. It requires the encryption of sensitive data transmission.
- D. It requires that network applications be accessible to users.
Answer: B
Explanation:
Integrityin IT security ensures that data remains accurate, unaltered, and trustworthy throughout its lifecycle.
This means that data transmission should occurwithout errorsand should not be modified by unauthorized parties. Mechanisms like checksums, hashing, and digital signatures help maintain integrity.
* Encryption (B)enhances confidentiality, not integrity.
* Accessibility (C and D)relates to availability, not integrity.
NEW QUESTION # 20
An attacker sends emails claiming that an online account has been locked. The email provides a fake link with the goal of tricking users into providing login credentials.
Which malicious attack strategy is represented in the scenario?
- A. IP address spoofing
- B. Man-in-the-middle attack
- C. Session hijacking
- D. Phishing
Answer: D
Explanation:
Phishingis a cyberattack where attackers impersonate legitimate entities (e.g., banks, companies) and send fraudulent emails or messages designed to trick recipients into revealing sensitive information, such as usernames, passwords, or financial details. The fake link in the email directs victims to a malicious site that captures their credentials.
* IP address spoofingdisguises a system's identity but does not involve email deception.
* Session hijackingtakes over an active session but does not involve email scams.
* Man-in-the-middle attackintercepts communication rather than tricking users via emails.
NEW QUESTION # 21
A start-up company wants to build its computer network by starting with the base-level resources offered by a cloud service. In this way, the company won't have to buy physical hardware but canstill have complete control over operating systems and other software.
Which cloud service model should be used?
- A. Software as a Service (SaaS)
- B. Infrastructure as a Service (IaaS)
- C. Platform as a Service (PaaS)
- D. Function as a Service (FaaS)
Answer: B
Explanation:
Infrastructure as a Service (IaaS)provides virtualized computing resources, including virtual machines, storage, and networking, while allowing users full control over operating systems and applications. Examples include AWS EC2 and Google Compute Engine.
* SaaSprovides ready-to-use applications (e.g., Google Docs).
* FaaSruns code in response to events (e.g., AWS Lambda).
* PaaSprovides development environments but not full infrastructure control.
NEW QUESTION # 22
What is the layer of the OSI model that creates, maintains, and disconnects process communications over the network?
- A. Physical
- B. Transport
- C. Session
- D. Data link
Answer: C
Explanation:
TheSession layer(Layer 5 of the OSI model) is responsible for establishing, maintaining, and terminating communication sessions between network applications. It ensures that data exchanges remain synchronized and structured.
* Data link layerhandles error detection and frame transmission.
* Physical layerdeals with hardware-level transmission.
* Transport layerensures reliable data delivery but does not manage sessions.
NEW QUESTION # 23
A company's internal messaging system is being redesigned. The authentication procedures were so cumbersome that employees were using personal email to communicate.
What is the security principle implemented in this scenario?
- A. Fail-safe
- B. Least common mechanism
- C. Zero-trust model
- D. Psychological acceptability
Answer: D
Explanation:
Psychological acceptabilitystates that security measures should beuser-friendly and not overlyburdensome
. If security controls are too complex, users may bypass them, leading to weaker security. In this case, employees used personal email because authentication procedures were too cumbersome.
* Zero-trust modelenforces strict access control, not usability.
* Least common mechanismlimits shared resources.
* Fail-safeensures secure failure handling, not usability.
NEW QUESTION # 24
An organization is evaluating its internal network. Currently, each device is connected to two adjacent devices, one on either side.
Which type of network topology is being used?
- A. Bus
- B. Ring
- C. Star
- D. Point-to-point
Answer: B
Explanation:
ARing topologyis a network setup where each device is connected to two adjacent devices, forming a circular path for data transmission. This topology ensures that data travels in a single orbidirectional loop.
* Point-to-pointtopology refers to a direct connection between two devices without forming a larger network structure.
* Bus topologyhas all devices connected to a single central cable, rather than forming a ring.
* Star topologyfeatures a central hub or switch that connects all devices, rather than direct device-to- device links.
NEW QUESTION # 25
A company grants users permissions based on the department in which users work.
Which type of access control is involved?
- A. Attribute-based
- B. Role-based
- C. Discretionary
- D. Context-based
Answer: B
Explanation:
Role-Based Access Control (RBAC)assigns permissions based on a user's role within an organization, such as department, job function, or hierarchy. This ensures that usersonly have access to resources necessary for their duties.
* Attribute-based access control (ABAC)considers dynamic attributes like time, location, and device.
* Context-based access controlrestricts access based on environmental conditions.
* Discretionary access control (DAC)allows data owners to determine access rights.
NEW QUESTION # 26
Which CIA triad component is a driver for enabling role-based access controls?
- A. Confidentiality
- B. Consistency
- C. Integrity
- D. Availability
Answer: A
Explanation:
Confidentialityensures that sensitive information is only accessible to authorized individuals.Role-Based Access Control (RBAC)enforces confidentiality by restricting access based on a user's role within an organization, ensuring that only authorized users can view or modify certain data.
* Integrityensures data is not altered improperly.
* Availabilityensures access to resources but does not manage permissions.
* Consistencyis not a CIA triad component.
NEW QUESTION # 27
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?
- A. Availability
- B. Innovation
- C. Confidentiality
- D. Integrity
Answer: A
Explanation:
Availabilityensures that systems and data remain accessible and operational, even in the event of failures or attacks. Adisaster recovery plan (DRP)focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
* Confidentialityfocuses on restricting unauthorized access.
* Integrityensures data remains unaltered, but does not address service continuity.
* Innovationis unrelated to the CIA triad.
NEW QUESTION # 28
An attacker uses malicious software to disable network resources, demanding a ransom to restore access.
Which category describes the purpose of the attack?
- A. Data modification
- B. Data export
- C. Denial of availability
- D. Launch point
Answer: C
Explanation:
This describes aransomware attack, which falls underdenial of availabilitybecause it prevents users from accessing their data or systems until a ransom is paid. Attackers use encryption to lock files, disrupting operations.
* Data modificationrefers to unauthorized changes to information.
* Data exportinvolves stealing data rather than disabling access.
* Launch pointdescribes an attacker's use of a compromised system to attack others.
NEW QUESTION # 29
Which component of the IT securityCIA triadis a driver for enabling data encryption?
- A. Confidentiality
- B. Integrity
- C. Application
- D. Availability
Answer: A
Explanation:
Confidentialityensures that sensitive information is protected from unauthorized access.Encryptionis a key mechanism used to maintain confidentiality by converting readable data into a secure format that can only be accessed with a decryption key.
* Integrityensures data is not altered improperly but does not directly relate to encryption.
* Availabilityfocuses on system uptime and accessibility.
* Applicationis not a component of the CIA triad.
NEW QUESTION # 30
An attacker uses a list of commonly used access credentials to attempt to gain access to an online account.
Which malicious attack strategy is represented in the scenario?
- A. Phishing
- B. Credential stuffing
- C. Dictionary attack
- D. Social engineering
Answer: C
Explanation:
Adictionary attackis a password-cracking method that systematically tries common words, phrases, and predictable passwords (e.g., "password123", "admin2024") to gain access to an account. Attackers often compile large lists of weak or reused passwords.
* Phishingtricks users into revealing passwords but does not systematically test multiple words.
* Credential stuffinguses breached passwords rather than guessing from a list.
* Social engineeringmanipulates users but does not rely on automated password attempts.
NEW QUESTION # 31
A company wants to implement virtual machines with a focus on security and efficiency.
Which type of hypervisor fits the need described in the scenario?
- A. Type 2
- B. Type 1
- C. Open source
- D. Proprietary
Answer: B
Explanation:
AType 1 hypervisor(bare-metal hypervisor) runs directly on the hardware, providing better security and efficiency compared to Type 2 hypervisors. It reduces attack surfaces and optimizes resource utilization.
Examples include VMware ESXi and Microsoft Hyper-V.
* Type 2 hypervisorsrely on a host OS, making them less secure and efficient.
* Open-source and proprietarydescribe licensing models, not hypervisor types.
NEW QUESTION # 32
......
Maximum Grades By Making ready With Network-and-Security-Foundation Dumps: https://www.passcollection.com/Network-and-Security-Foundation_real-exams.html
Prepare Network-and-Security-Foundation Exam Questions Recently Updated Questions: https://drive.google.com/open?id=1a-7WmOlfQPpi4dNIbCn5r4BeojzXeoRS
