Practice Test for Network-and-Security-Foundation Certification Real 2025 Mock Exam
Prepare For Realistic Network-and-Security-Foundation Dumps PDF - 100% Passing Guarantee
NEW QUESTION # 14
A company is developing a data protection methodology in order to improve data protection measures.
What is a strategy that should be used?
- A. Enhance physical resource security
- B. Implement wired equivalent privacy (WEP)
- C. Use a variable network topology
- D. Increase wireless access point range
Answer: A
Explanation:
Enhancing physical resource securityensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.
* Using a variable network topologydoes not directly protect data.
* Increasing wireless access point rangemay improve connectivity but does not enhance security.
* WEPis weak and should not be used for data protection.
NEW QUESTION # 15
Which layer of the OSI model includes HTTP?
- A. Transport
- B. Network
- C. Application
- D. Session
Answer: C
Explanation:
TheApplication layer(Layer 7 of the OSI model) includesHypertext Transfer Protocol (HTTP), which is used for web communication. This layer provides network services directly to applications and users.
* Network layerdeals with IP addressing and packet routing.
* Session layermanages connections but does not include HTTP.
* Transport layerensures reliable data transmission but does not handle application protocols.
NEW QUESTION # 16
What is the layer of the OSI model that creates, maintains, and disconnects process communications over the network?
- A. Transport
- B. Session
- C. Physical
- D. Data link
Answer: B
Explanation:
TheSession layer(Layer 5 of the OSI model) is responsible for establishing, maintaining, and terminating communication sessions between network applications. It ensures that data exchanges remain synchronized and structured.
* Data link layerhandles error detection and frame transmission.
* Physical layerdeals with hardware-level transmission.
* Transport layerensures reliable data delivery but does not manage sessions.
NEW QUESTION # 17
A company grants users permissions based on the department in which users work.
Which type of access control is involved?
- A. Context-based
- B. Discretionary
- C. Role-based
- D. Attribute-based
Answer: C
Explanation:
Role-Based Access Control (RBAC)assigns permissions based on a user's role within an organization, such as department, job function, or hierarchy. This ensures that usersonly have access to resources necessary for their duties.
* Attribute-based access control (ABAC)considers dynamic attributes like time, location, and device.
* Context-based access controlrestricts access based on environmental conditions.
* Discretionary access control (DAC)allows data owners to determine access rights.
NEW QUESTION # 18
An organization does not have controls in place to limit employee access to sensitive customer data.
What is a component of the CIA triad that is violated?
- A. Interpretation
- B. Availability
- C. Integrity
- D. Confidentiality
Answer: D
Explanation:
Confidentialityensures that only authorized users have access to sensitive information. Without proper access controls, employees may be able to view or modify sensitive data without proper authorization, leading to a confidentiality breach.
* Integrityinvolves protecting data from unauthorized modifications.
* Availabilityensures that systems remain operational.
* Interpretationis not part of the CIA triad.
NEW QUESTION # 19
In the process of setting up a Linux-based network system, a technician needs to determine if there is connectivity to a hostname.
Which command should be used?
- A. ifconfig
- B. nslookup
- C. ping
- D. dig
Answer: C
Explanation:
Thepingcommand in Linux is used to check network connectivity to a specific hostname or IP address. It sends ICMP Echo Request packets and measures response times.
* nslookupis used for DNS lookups, not connectivity testing.
* ifconfigdisplays network interface configurations but does not test connectivity.
* digis used for detailed DNS queries.
NEW QUESTION # 20
An organization's network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?
- A. Implement wired equivalent privacy (WEP)
- B. Implement a bus topology
- C. Avoid the use of asymmetric encryption
- D. Configure RADIUS authentication
Answer: D
Explanation:
Configuring RADIUS authenticationenhances Wi-Fi security by requiring user authentication before granting access to the network. This prevents unauthorized users from connecting and mitigates risks from rogue access points.
* WEPis outdated and insecure; WPA2/WPA3 with RADIUS should be used instead.
* A bus topologyis a network design choice, not a security measure.
* Avoiding asymmetric encryptionweakens security rather than improving it.
NEW QUESTION # 21
An organization is the victim of an attack in which an attacker targets a computer to use as a tool to infect and target other computers in a larger attack.
What is the purpose of this attack?
- A. Launch point
- B. Data export
- C. Denial of availability
- D. Data modification
Answer: A
Explanation:
Alaunch point attackoccurs when an attacker compromises a system and uses it as a foothold to spread malware, conduct reconnaissance, or launch further attacks against other systems. Botnets and command-and- control (C2) servers operate this way.
* Denial of availabilitydisrupts service, but does not spread attacks.
* Data exportsteals data instead of launching further attacks.
* Data modificationchanges existing information but does not involve propagating threats.
NEW QUESTION # 22
A company is designing an information system and is maintaining a focus on the user experience and resulting productivity rather than on the technology itself.
What is the security principle implemented in this scenario?
- A. Fail-safe
- B. Least common mechanism
- C. Zero-trust model
- D. Human-centeredness
Answer: D
Explanation:
Human-centerednessin security design prioritizesuser experience and productivitywhile implementing security measures. It ensures that security policies are intuitive and do not excessively burden users, reducing resistance to security compliance.
* Least common mechanismminimizes shared resources to enhance security.
* Fail-safeensures secure defaults in case of system failure.
* Zero-trust modelassumes no inherent trust in users or devices.
NEW QUESTION # 23
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?
- A. Confidentiality
- B. Innovation
- C. Availability
- D. Integrity
Answer: C
Explanation:
Availabilityensures that systems and data remain accessible and operational, even in the event of failures or attacks. Adisaster recovery plan (DRP)focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
* Confidentialityfocuses on restricting unauthorized access.
* Integrityensures data remains unaltered, but does not address service continuity.
* Innovationis unrelated to the CIA triad.
NEW QUESTION # 24
Which statement describes the Integrity tenet of IT security?
- A. It involves transmitting network data without any errors.
- B. It requires the encryption of sensitive data transmission.
- C. It requires that network applications be accessible to users.
- D. It involves keeping systems accessible for network users.
Answer: A
Explanation:
Integrityin IT security ensures that data remains accurate, unaltered, and trustworthy throughout its lifecycle.
This means that data transmission should occurwithout errorsand should not be modified by unauthorized parties. Mechanisms like checksums, hashing, and digital signatures help maintain integrity.
* Encryption (B)enhances confidentiality, not integrity.
* Accessibility (C and D)relates to availability, not integrity.
NEW QUESTION # 25
A person is troubleshooting a network issue and needs to see a list of all active network connections.
Which Linux command should be used?
- A. ifconfig
- B. nslookup
- C. dig
- D. netstat
Answer: D
Explanation:
Thenetstatcommand in Linux displays active network connections, listening ports, and network statistics. It is useful for diagnosing network issues and identifying open connections.
* nslookupis for DNS queries.
* digprovides DNS information, not network connection status.
* ifconfigshows network interface details but does not list active connections.
NEW QUESTION # 26
An organization is updating its information security policies in order to comply with thePersonal Information Protection and Electronic Documents Act (PIPEDA).
What should this organization expect to be required under this legislation?
- A. Disclose the software used to protect personal data
- B. Securely dispose of personally identifiable information
- C. Notify individuals each time their personal information is viewed
- D. Compensate individuals for revenue from the sale of their information
Answer: B
Explanation:
PIPEDArequires businesses in Canada to protectpersonal informationthrough security measures andproper disposal practices. This includessecure deletion of personal data when no longer neededto prevent unauthorized access.
* Compensating individuals for data salesis not a legal requirement.
* Notifying individuals of each data accessis unnecessary unless required by a breach.
* Disclosing security softwareis not mandated by PIPEDA.
NEW QUESTION # 27
A library has a network that allows patrons to use their mobile devices to connect to the internet.
Which type of network is described?
- A. SAN
- B. PAN
- C. WLAN
- D. MAN
Answer: C
Explanation:
AWireless Local Area Network (WLAN)enables wireless connectivity within a defined geographic area, such as a library, office, or coffee shop. WLANs use Wi-Fi technology to allow users to access the internet without physical cables.
* Storage Area Networks (SANs)are used for data storage and do not provide internet connectivity to users.
* Metropolitan Area Networks (MANs)cover larger areas, such as cities, and are not used within a single building.
* Personal Area Networks (PANs)connect personal devices like smartphones and laptops over short distances, such as via Bluetooth, but do not support public internet access.
NEW QUESTION # 28
Access to a company's information system requires a user to be within a valid geographic location and to enter a valid username and password.
Which concept does this scenario demonstrate?
- A. Single sign-on
- B. User-based accounting
- C. Multifactor authentication
- D. Certificate verification
Answer: C
Explanation:
Multifactor authentication (MFA)requires users to verify their identity usingmultiple factors, such as something they know (password), something they have (a token or phone), or somewhere they are (geolocation-based access control). Requiring both location verification andpassword authentication demonstrates MFA.
* Certificate verificationchecks digital certificates for security but does not use multiple authentication factors.
* User-based accountinglogs user activities but does not verify identity.
* Single sign-on (SSO)allows access to multiple systems with one login but is not necessarily MFA.
NEW QUESTION # 29
A company wants to use a cloud service to obtain virtual machines with pre-installed and configured software.
Which cloud service model should be used?
- A. Platform as a Service (PaaS)
- B. Software as a Service (SaaS)
- C. Infrastructure as a Service (IaaS)
- D. Function as a Service (FaaS)
Answer: A
Explanation:
Platform as a Service (PaaS)provides a pre-configured computing environment that includes an operating system, runtime, and development tools, making it ideal for developers who want a ready-to-use platform.
Examples include Google App Engine and Microsoft Azure App Services.
* SaaSprovides fully hosted applications, not just pre-configured virtual machines.
* IaaSprovides infrastructure without pre-installed software.
* FaaSexecutes specific functions without persistent infrastructure.
NEW QUESTION # 30
A person is troubleshooting a network issue and needs to see details about network adapters and their settings.
Which Windows command should be used?
- A. netstat
- B. nslookup
- C. ipconfig
- D. traceroute
Answer: C
Explanation:
Theipconfigcommand in Windows provides details about a computer's network adapters, including IP addresses, subnet masks, default gateways, and DNS settings. It is particularly useful for troubleshooting connectivity issues.
* traceroute(or tracert in Windows) is used to trace the path packets take to a destination.
* nslookupis used for querying DNS records.
* netstatprovides details about active network connections and listening ports, but not adapter configurations.
NEW QUESTION # 31
A company is ensuring that its network protocol meets encryption standards.
What is the CIA triad component targeted in the scenario?
- A. Consistency
- B. Availability
- C. Integrity
- D. Confidentiality
Answer: D
Explanation:
Confidentialityin IT security ensures that sensitive data remains private and protected from unauthorized access. Encryption is a key measure used to maintain confidentiality by encoding data so that only authorized users can access it.
* Integrityensures that data remains accurate and unchanged.
* Availabilityensures that data is accessible when needed.
* Consistencyis not a component of the CIA triad.
NEW QUESTION # 32
An organization is the victim of an attack in which an attacker uses a forged employee ID card to deceive a company employee into providing sensitive information.
What is the type of cyberattack described in this scenario?
- A. Man-in-the-middle attack
- B. Pharming
- C. Brute-force attack
- D. Social engineering
Answer: D
Explanation:
Social engineeringinvolves manipulating people into divulging confidential information, often by impersonation, deception, or psychological tactics. Using aforged ID cardto gain trust and extract sensitive information is a classic example of social engineering.
* Brute-force attackattempts to guess passwords through automated methods.
* Man-in-the-middle attackintercepts communication but does not rely on deception.
* Pharmingtricks users into visiting fraudulent websites but does not involve impersonation.
NEW QUESTION # 33
A company wants to implement virtual machines with a focus on security and efficiency.
Which type of hypervisor fits the need described in the scenario?
- A. Type 2
- B. Open source
- C. Type 1
- D. Proprietary
Answer: C
Explanation:
AType 1 hypervisor(bare-metal hypervisor) runs directly on the hardware, providing better security and efficiency compared to Type 2 hypervisors. It reduces attack surfaces and optimizes resource utilization.
Examples include VMware ESXi and Microsoft Hyper-V.
* Type 2 hypervisorsrely on a host OS, making them less secure and efficient.
* Open-source and proprietarydescribe licensing models, not hypervisor types.
NEW QUESTION # 34
......
Download Network-and-Security-Foundation Exam Dumps Questions to get 100% Success: https://testking.itexamsimulator.com/Network-and-Security-Foundation-brain-dumps.html
