Free Network-and-Security-Foundation Exam Files Verified & Correct Answers Downloaded Instantly
Instant Download Network-and-Security-Foundation Dumps Q&As Provide PDF&Test Engine
NEW QUESTION # 16
Which statement describes the Integrity tenet of IT security?
- A. It involves keeping systems accessible for network users.
- B. It requires that network applications be accessible to users.
- C. It requires the encryption of sensitive data transmission.
- D. It involves transmitting network data without any errors.
Answer: D
Explanation:
Integrityin IT security ensures that data remains accurate, unaltered, and trustworthy throughout its lifecycle.
This means that data transmission should occurwithout errorsand should not be modified by unauthorized parties. Mechanisms like checksums, hashing, and digital signatures help maintain integrity.
* Encryption (B)enhances confidentiality, not integrity.
* Accessibility (C and D)relates to availability, not integrity.
NEW QUESTION # 17
An attacker uses a poisoned domain name on the domain name server to navigate users to the attacker's site.
Which malicious attack strategy is represented in the scenario?
- A. Pharming
- B. IP address spoofing
- C. Session hijacking
- D. Brute-force attack
Answer: A
Explanation:
Pharmingis an attack that manipulates theDomain Name System (DNS)to redirect users to fraudulent websites without their knowledge. Attackers poison DNS records or compromise routers to reroute traffic to malicious sites designed to steal information.
* Brute-force attackinvolves password guessing, not domain manipulation.
* IP address spoofingdisguises a device's identity but does not alter DNS records.
* Session hijackingtakes over active user sessions but does not redirect websites.
NEW QUESTION # 18
A company is ensuring that its network protocol meets encryption standards.
What is the CIA triad component targeted in the scenario?
- A. Integrity
- B. Consistency
- C. Confidentiality
- D. Availability
Answer: C
Explanation:
Confidentialityin IT security ensures that sensitive data remains private and protected from unauthorized access. Encryption is a key measure used to maintain confidentiality by encoding data so that only authorized users can access it.
* Integrityensures that data remains accurate and unchanged.
* Availabilityensures that data is accessible when needed.
* Consistencyis not a component of the CIA triad.
NEW QUESTION # 19
A company grants users permissions based on the department in which users work.
Which type of access control is involved?
- A. Discretionary
- B. Attribute-based
- C. Context-based
- D. Role-based
Answer: D
Explanation:
Role-Based Access Control (RBAC)assigns permissions based on a user's role within an organization, such as department, job function, or hierarchy. This ensures that usersonly have access to resources necessary for their duties.
* Attribute-based access control (ABAC)considers dynamic attributes like time, location, and device.
* Context-based access controlrestricts access based on environmental conditions.
* Discretionary access control (DAC)allows data owners to determine access rights.
NEW QUESTION # 20
A library has a network that allows patrons to use their mobile devices to connect to the internet.
Which type of network is described?
- A. SAN
- B. WLAN
- C. MAN
- D. PAN
Answer: B
Explanation:
AWireless Local Area Network (WLAN)enables wireless connectivity within a defined geographic area, such as a library, office, or coffee shop. WLANs use Wi-Fi technology to allow users to access the internet without physical cables.
* Storage Area Networks (SANs)are used for data storage and do not provide internet connectivity to users.
* Metropolitan Area Networks (MANs)cover larger areas, such as cities, and are not used within a single building.
* Personal Area Networks (PANs)connect personal devices like smartphones and laptops over short distances, such as via Bluetooth, but do not support public internet access.
NEW QUESTION # 21
An organization is the victim of an attack in which an attacker uses a forged employee ID card to deceive a company employee into providing sensitive information.
What is the type of cyberattack described in this scenario?
- A. Social engineering
- B. Brute-force attack
- C. Man-in-the-middle attack
- D. Pharming
Answer: A
Explanation:
Social engineeringinvolves manipulating people into divulging confidential information, often by impersonation, deception, or psychological tactics. Using aforged ID cardto gain trust and extract sensitive information is a classic example of social engineering.
* Brute-force attackattempts to guess passwords through automated methods.
* Man-in-the-middle attackintercepts communication but does not rely on deception.
* Pharmingtricks users into visiting fraudulent websites but does not involve impersonation.
NEW QUESTION # 22
An organization has experienced rogue access points in the past and wants to take actions to mitigate this type of attack.
What should this organization do?
- A. Require complex passwords
- B. Disallow ICMP packets on the firewall
- C. Use monitor mode scanning
- D. Use server-side validation
Answer: C
Explanation:
Monitor mode scanningallows administrators to detect unauthorized or rogue access points broadcasting in the network. This technique, along withwireless intrusion detection systems (WIDS), helps identify and block unauthorized devices.
* Requiring complex passwordsenhances security but does not prevent rogue APs.
* Server-side validationsecures applications, not wireless networks.
* Disallowing ICMP packetsis a security measure but does not address rogue APs.
NEW QUESTION # 23
An organization is the victim of an attack in which an attacker intercepts messages between two parties before transferring them to the correct destination.
What is the type of cyberattack described in this scenario?
- A. Social engineering
- B. Man-in-the-middle attack
- C. Credential stuffing
- D. Pharming
Answer: B
Explanation:
Aman-in-the-middle (MITM) attackoccurs when an attacker secretly intercepts and relays communication between two parties. This allows the attacker to steal data, modify messages, or inject malicious content without the victims' knowledge.
* Credential stuffingreuses stolen login credentials but does not involve interception.
* Social engineeringmanipulates users rather than intercepting messages.
* Pharmingredirects users to fraudulent websites, but it does not intercept communication.
NEW QUESTION # 24
An organization is updating its information security policies in order to comply with thePersonal Information Protection and Electronic Documents Act (PIPEDA).
What should this organization expect to be required under this legislation?
- A. Securely dispose of personally identifiable information
- B. Notify individuals each time their personal information is viewed
- C. Compensate individuals for revenue from the sale of their information
- D. Disclose the software used to protect personal data
Answer: A
Explanation:
PIPEDArequires businesses in Canada to protectpersonal informationthrough security measures andproper disposal practices. This includessecure deletion of personal data when no longer neededto prevent unauthorized access.
* Compensating individuals for data salesis not a legal requirement.
* Notifying individuals of each data accessis unnecessary unless required by a breach.
* Disclosing security softwareis not mandated by PIPEDA.
NEW QUESTION # 25
Which layer of the OSI model includes the TCP?
- A. Network
- B. Session
- C. Application
- D. Transport
Answer: D
Explanation:
TheTransport layer(Layer 4 of the OSI model) includes theTransmission Control Protocol (TCP), which provides reliable, connection-oriented communication. TCP ensures error-checking, sequencing, and retransmission of lost packets.
* Application layerdeals with end-user protocols like HTTP and FTP.
* Session layermanages communication sessions but not transport protocols.
* Network layerfocuses on IP addressing and routing, not transport mechanisms.
NEW QUESTION # 26
A company is designing an information system and is maintaining a focus on the user experience and resulting productivity rather than on the technology itself.
What is the security principle implemented in this scenario?
- A. Zero-trust model
- B. Fail-safe
- C. Least common mechanism
- D. Human-centeredness
Answer: D
Explanation:
Human-centerednessin security design prioritizesuser experience and productivitywhile implementing security measures. It ensures that security policies are intuitive and do not excessively burden users, reducing resistance to security compliance.
* Least common mechanismminimizes shared resources to enhance security.
* Fail-safeensures secure defaults in case of system failure.
* Zero-trust modelassumes no inherent trust in users or devices.
NEW QUESTION # 27
A computer network has software that tracks successful and unsuccessful connection attempts to the network in order to better identify attacks.
Which network security concept does this scenario address?
- A. Accounting
- B. Availability
- C. Authentication
- D. Authorization
Answer: A
Explanation:
Accounting(also known asauditing or logging) is a network security concept that tracks user activities, includingsuccessful and failed authentication attempts, system changes, and resource access. This helps in detecting and mitigating security breaches.
* Authenticationverifies user identity but does not track activity.
* Availabilityensures systems remain operational.
* Authorizationcontrols user permissions but does not log activities.
NEW QUESTION # 28
In the process of setting up a Linux-based network system, a technician needs to determine if there is connectivity to a hostname.
Which command should be used?
- A. dig
- B. ifconfig
- C. ping
- D. nslookup
Answer: C
Explanation:
Thepingcommand in Linux is used to check network connectivity to a specific hostname or IP address. It sends ICMP Echo Request packets and measures response times.
* nslookupis used for DNS lookups, not connectivity testing.
* ifconfigdisplays network interface configurations but does not test connectivity.
* digis used for detailed DNS queries.
NEW QUESTION # 29
A company wants to implement a cloud service to obtain access to virtual machines. The company wants to be able to choose the operating systems and configure each of the machines.
What is the type of cloud service model that fits the needs of this company?
- A. Function as a Service (FaaS)
- B. Infrastructure as a Service (IaaS)
- C. Software as a Service (SaaS)
- D. Platform as a Service (PaaS)
Answer: B
Explanation:
Infrastructure as a Service (IaaS)provides virtualized computing resources over the cloud, including virtual machines where users can install and configure their own operating systems and applications. It offers flexibility and scalability without requiring hardware investment. Examples include AWS EC2 and Microsoft Azure Virtual Machines.
* FaaSexecutes small code functions without infrastructure management.
* PaaSprovides a managed platform but not full OS control.
* SaaSoffers ready-to-use applications without infrastructure control.
NEW QUESTION # 30
An organization is the victim of an attack in which an attacker gains unauthorized access to a computer to steal information and forward it via the internet to another attacker.
What is the purpose of this attack?
- A. Denial of availability
- B. Launch point
- C. Data modification
- D. Data export
Answer: D
Explanation:
This scenario describes adata exportattack, where an attacker steals sensitive information (e.g., personal data, trade secrets, or financial records) and transfers it to another entity, often for malicious purposes.
* Launch pointrefers to using a compromised system for further attacks.
* Denial of availabilitydisrupts access to resources.
* Data modificationinvolves unauthorized changes rather than theft.
NEW QUESTION # 31
When setting up a network, a technician needs a router that connects computers together and connects computers to the internet.
Which router should be used?
- A. Inter-provider border router
- B. Broadband router
- C. Subscriber edge router
- D. Core router
Answer: B
Explanation:
A broadband router is a type of network router that connects multiple computers within a local network while also providing internet access. It functions as a gateway between the local network and the internet by handling data packet transmission and routing. Broadband routers are widely used in small offices and homes because they offer essential networking services, including DHCP, NAT, and sometimes wireless connectivity.
* Inter-provider border routersare used by ISPs to route data between different providers and do not serve as an internet gateway for end users.
* Subscriber edge routersare typically deployed at the edge of an ISP's network to connect subscriber networks but do not provide full internet routing functionalities.
* Core routersoperate at the backbone level of a network, facilitating high-speed data transfer but not connecting end-user devices directly.
NEW QUESTION # 32
Which scenario demonstrates a violation of the integrity component of the CIA triad?
- A. A network's domain name system server has not been fully operational for one month.
- B. A company stores sensitive customer data without access controls.
- C. An employee accidentally modified a customer account incorrectly.
- D. A company has an unacceptably high network downtime during high-traffic time periods.
Answer: C
Explanation:
A violation ofintegrityoccurs whendata is modified incorrectly, whether intentionally or by accident. In this case, anemployee modifying a customer account incorrectlydemonstrates a breach of data integrity.
* A and Crelate toavailability, as they describe system downtime.
* Drelates toconfidentiality, as it describes improper data protection.
NEW QUESTION # 33
......
Exam Valid Dumps with Instant Download Free Updates: https://www.vcedumps.com/Network-and-Security-Foundation-examcollection.html
Fast Exam Updates Network-and-Security-Foundation dumps with PDF Test Engine Practice: https://drive.google.com/open?id=1YzYhn8IOYIp1CRPG59y5Lf_CwAC-GEWb
