64 Q&As in UPDATED Network-and-Security-Foundation Exam Questions Certification Test Engine to PDF [Q27-Q41]

admin -

February 12, 2026

5/5 - (2 votes)

64 Q&As in UPDATED Network-and-Security-Foundation Exam Questions Certification Test Engine to PDF

Get The Important Preparation Guide With Network-and-Security-Foundation Dumps

QUESTION 27
A start-up company wants to build its computer network by starting with the base-level resources offered by a cloud service. In this way, the company won’t have to buy physical hardware but canstill have complete control over operating systems and other software.
Which cloud service model should be used?

Software as a Service (SaaS)

Function as a Service (FaaS)

Infrastructure as a Service (IaaS)

Platform as a Service (PaaS)

Infrastructure as a Service (IaaS)provides virtualized computing resources, including virtual machines, storage, and networking, while allowing users full control over operating systems and applications. Examples include AWS EC2 and Google Compute Engine.
* SaaSprovides ready-to-use applications (e.g., Google Docs).
* FaaSruns code in response to events (e.g., AWS Lambda).
* PaaSprovides development environments but not full infrastructure control.

QUESTION 28
An organization’s network has been the target of several cyberattacks.
Which strategy should the organization use for Wi-Fi hardening?

Implement wired equivalent privacy (WEP)

Configure RADIUS authentication

Implement a bus topology

Avoid the use of asymmetric encryption

Configuring RADIUS authenticationenhances Wi-Fi security by requiring user authentication before granting access to the network. This prevents unauthorized users from connecting and mitigates risks from rogue access points.
* WEPis outdated and insecure; WPA2/WPA3 with RADIUS should be used instead.
* A bus topologyis a network design choice, not a security measure.
* Avoiding asymmetric encryptionweakens security rather than improving it.

QUESTION 29
A company has a legacy network in which all devices receive all messages transmitted by a central wire.
Which network topology is described?

Star

Point-to-point

Bus

Ring

ABus topologyis a network setup in which all devices share a single communication channel (central wire), and data is transmitted along this cable. Each device listens for data but only processes packets addressed to it.
This topology was widely used in older Ethernet networks.
* Star topologyuses a central switch or hub, not a shared wire.
* Point-to-point topologyinvolves a direct link between two devices, not multiple devices sharing a medium.
* Ring topologyconnects each device to two adjacent devices in a circular path, not a single shared bus.

QUESTION 30
After recently experiencing a security breach, a company is working on improving its database security. As a part of its security governance strategies, the company is developing a database security checklist.
Which component is important to include in this checklist?

Disclosing any instances of breaches of personal data

Restricting physical access to locations where data is housed

Developing algorithms for secure access to data

Outsourcing data management to third-party vendors

Restricting physical accessto data storage facilities is a critical part of database security. Even with strong cybersecurity measures,unauthorized physical accessto servers can lead to breaches. Security strategies includebiometric authentication, surveillance cameras, and restricted entry zones.
* Disclosing breachesis required by compliance laws but does not protect data proactively.
* Developing algorithmsimproves security but is not a fundamental checklist item.
* Outsourcing data managementcan introduce security risks if not properly controlled.

QUESTION 31
In order to reduce the risk of insider attacks, a company assigns role-based permissions to its users.
Which network security concept does this scenario address?

Authentication

Accounting

Availability

Authorization

Authorizationis the process of granting specific access rights and permissions based on user roles. By implementingRole-Based Access Control (RBAC), organizations ensure that users only have access to resources necessary for their job functions, reducing the risk of insider threats.
* Authenticationverifies identity but does not control access.
* Accountinglogs activities but does not restrict access.
* Availabilityensures system uptime but is unrelated to permissions.

QUESTION 32
A company is designing an information system and is maintaining a focus on the user experience and resulting productivity rather than on the technology itself.
What is the security principle implemented in this scenario?

Least common mechanism

Fail-safe

Zero-trust model

Human-centeredness

Human-centerednessin security design prioritizesuser experience and productivitywhile implementing security measures. It ensures that security policies are intuitive and do not excessively burden users, reducing resistance to security compliance.
* Least common mechanismminimizes shared resources to enhance security.
* Fail-safeensures secure defaults in case of system failure.
* Zero-trust modelassumes no inherent trust in users or devices.

QUESTION 33
An organization is the victim of an attack in which an attacker targets a computer to use as a tool to infect and target other computers in a larger attack.
What is the purpose of this attack?

Denial of availability

Data export

Data modification

Launch point

Alaunch point attackoccurs when an attacker compromises a system and uses it as a foothold to spread malware, conduct reconnaissance, or launch further attacks against other systems. Botnets and command-and- control (C2) servers operate this way.
* Denial of availabilitydisrupts service, but does not spread attacks.
* Data exportsteals data instead of launching further attacks.
* Data modificationchanges existing information but does not involve propagating threats.

QUESTION 34
Which scenario demonstrates a violation of the integrity component of the CIA triad?

A network’s domain name system server has not been fully operational for one month.

An employee accidentally modified a customer account incorrectly.

A company has an unacceptably high network downtime during high-traffic time periods.

A company stores sensitive customer data without access controls.

A violation ofintegrityoccurs whendata is modified incorrectly, whether intentionally or by accident. In this case, anemployee modifying a customer account incorrectlydemonstrates a breach of data integrity.
* A and Crelate toavailability, as they describe system downtime.
* Drelates toconfidentiality, as it describes improper data protection.

QUESTION 35
An organization is updating its information security policies in order to comply with thePersonal Information Protection and Electronic Documents Act (PIPEDA).
What should this organization expect to be required under this legislation?

Securely dispose of personally identifiable information

Compensate individuals for revenue from the sale of their information

Notify individuals each time their personal information is viewed

Disclose the software used to protect personal data

PIPEDArequires businesses in Canada to protectpersonal informationthrough security measures andproper disposal practices. This includessecure deletion of personal data when no longer neededto prevent unauthorized access.
* Compensating individuals for data salesis not a legal requirement.
* Notifying individuals of each data accessis unnecessary unless required by a breach.
* Disclosing security softwareis not mandated by PIPEDA.

QUESTION 36
A host is already set up with an operating system. An administrator wants to install a hypervisor atop the operating system to allow for setting up virtual machines.
Which hypervisor should be used?

Open source

Proprietary

Type 1

Type 2

AType 2 hypervisor(hosted hypervisor) runs on top of an existing operating system and allows for the creation of virtual machines. Examples include VMware Workstation and Oracle VirtualBox.
* Type 1 hypervisorsrun directly on hardware without an OS (e.g., VMware ESXi, Microsoft Hyper-V).
* Open-source and proprietarydescribe licensing models, not hypervisor types.

QUESTION 37
An attacker uses login data from a data breach to attempt to access another web service.
Which malicious attack strategy is represented in the scenario?

Brute-force attack

Credential stuffing

Session hijacking

Social engineering

Credential stuffingis a cyberattack where attackers use stolen username-password combinations from one breach to try logging into other services, exploiting users who reuse passwords. Automated tools test multiple credentials against multiple sites, leading to unauthorized access.
* Brute-force attacksystematically tries all possible passwords but does not use breached data.
* Session hijackingintercepts active user sessions but does not use stolen credentials.
* Social engineeringmanipulates users into revealing credentials, rather than using breached data.

QUESTION 38
An attacker issues commands to access a file on a network drive and overwrite it with new data.
What is the purpose of the attack?

Data modification

Launch point

Data export

Denial of availability

Data modification attacksinvolve unauthorized changes to stored data, altering information to mislead, disrupt, or destroy integrity. Attackers may modify logs, transactions, or records for fraud or sabotage.
* Launch pointis when a system is used to attack others.
* Data exportis the theft of data.
* Denial of availabilitymakes data inaccessible, but does not necessarily modify it.

QUESTION 39
A company is specifically worried about rogue access points.
Which strategy should be used as a mitigation against this type of attack?

Decrease the wireless range

Disable unnecessary services

Configure switch port tracing

Monitor normal traffic patterns

Configuring switch port tracinghelps detect unauthorized devices, such as rogue access points, that are connected to the network. Network administrators can useport securityandintrusion detection systems (IDS) to monitor and block unauthorized access points.
* Decreasing wireless rangemay limit exposure but does not actively detect rogue APs.
* Disabling unnecessary servicesimproves security but does not prevent rogue APs.
* Monitoring traffic patternshelps detect anomalies but does not directly stop rogue APs.

QUESTION 40
A company is ensuring that its network protocol meets encryption standards.
What is the CIA triad component targeted in the scenario?

Integrity

Consistency

Availability

Confidentiality

Confidentialityin IT security ensures that sensitive data remains private and protected from unauthorized access. Encryption is a key measure used to maintain confidentiality by encoding data so that only authorized users can access it.
* Integrityensures that data remains accurate and unchanged.
* Availabilityensures that data is accessible when needed.
* Consistencyis not a component of the CIA triad.

QUESTION 41
An attacker uses malicious software to disable network resources, demanding a ransom to restore access.
Which category describes the purpose of the attack?

Data modification

Denial of availability

Data export

Launch point

This describes aransomware attack, which falls underdenial of availabilitybecause it prevents users from accessing their data or systems until a ransom is paid. Attackers use encryption to lock files, disrupting operations.
* Data modificationrefers to unauthorized changes to information.
* Data exportinvolves stealing data rather than disabling access.
* Launch pointdescribes an attacker’s use of a compromised system to attack others.

Loading …