[Q17-Q31] Dumps for Free WGU Network-and-Security-Foundation Practice Exam Questions [May 08, 2026]

Rate this post

Dumps for Free WGU Network-and-Security-Foundation Practice Exam Questions [May 08, 2026]

Network-and-Security-Foundation Dumps PDF And Certification Training

WGU Network-and-Security-Foundation Exam Syllabus Topics:

Topic	Details
Topic 1	Applying Network Security Concepts for Business Continuity, Data Access, and Confidentiality: This section of the exam measures skills of Network Support Technicians and focuses on the essential ideas of protecting information within an organization. It introduces how security controls help maintain continuous operations, safeguard data access, and protect confidential information. Learners understand how these basic security measures support a stable and secure network environment.
Topic 2	Identifying Solutions for Compliance with Security Guidance: This section of the exam measures skills of Network Support Technicians and focuses on recognizing appropriate methods to meet security rules and organizational policies. It introduces how businesses follow security standards and how simple compliance strategies can reduce risks. Learners understand how to identify suitable solutions that help maintain secure and properly managed systems.
Topic 3	Identifying Basic Network Systems and Concepts Related to Networking Technologies: This section of the exam measures skills of IT Support Specialists and explains the fundamental components of network systems. It covers the basic ideas of how networks function, including common devices, connections, and communication methods. Learners gain a clear overview of core networking principles used in modern technology environments.

NEW QUESTION 17
What is the TCP/IP layer that includes the User Datagram Protocol (UDP)?

Application

Network or internet

Physical or network access

Transport

TheTransport layerin the TCP/IP model includes theUser Datagram Protocol (UDP)andTransmission Control Protocol (TCP). UDP is a connectionless protocol used for fast, lightweight data transmission where reliability is not the priority (e.g., video streaming, VoIP).
* Application layerhandles end-user services but not transport mechanisms.
* Network or internet layerdeals with IP addressing and routing, not UDP.
* Physical or network access layerconcerns hardware transmission methods.

NEW QUESTION 18
An attacker uses a list of commonly used access credentials to attempt to gain access to an online account.
Which malicious attack strategy is represented in the scenario?

Phishing

Dictionary attack

Credential stuffing

Social engineering

Adictionary attackis a password-cracking method that systematically tries common words, phrases, and predictable passwords (e.g., “password123”, “admin2024”) to gain access to an account. Attackers often compile large lists of weak or reused passwords.
* Phishingtricks users into revealing passwords but does not systematically test multiple words.
* Credential stuffinguses breached passwords rather than guessing from a list.
* Social engineeringmanipulates users but does not rely on automated password attempts.

NEW QUESTION 19
Access to a company’s information system requires a user to be within a valid geographic location and to enter a valid username and password.
Which concept does this scenario demonstrate?

Certificate verification

Multifactor authentication

User-based accounting

Single sign-on

Multifactor authentication (MFA)requires users to verify their identity usingmultiple factors, such as something they know (password), something they have (a token or phone), or somewhere they are (geolocation-based access control). Requiring both location verification andpassword authentication demonstrates MFA.
* Certificate verificationchecks digital certificates for security but does not use multiple authentication factors.
* User-based accountinglogs user activities but does not verify identity.
* Single sign-on (SSO)allows access to multiple systems with one login but is not necessarily MFA.

NEW QUESTION 20
After recently experiencing a security breach, a company is working on improving its database security. As a part of its security governance strategies, the company is developing a database security checklist.
Which component is important to include in this checklist?

Disclosing any instances of breaches of personal data

Restricting physical access to locations where data is housed

Developing algorithms for secure access to data

Outsourcing data management to third-party vendors

Restricting physical accessto data storage facilities is a critical part of database security. Even with strong cybersecurity measures,unauthorized physical accessto servers can lead to breaches. Security strategies includebiometric authentication, surveillance cameras, and restricted entry zones.
* Disclosing breachesis required by compliance laws but does not protect data proactively.
* Developing algorithmsimproves security but is not a fundamental checklist item.
* Outsourcing data managementcan introduce security risks if not properly controlled.

NEW QUESTION 21
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?

Innovation

Confidentiality

Availability

Integrity

Availabilityensures that systems and data remain accessible and operational, even in the event of failures or attacks. Adisaster recovery plan (DRP)focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
* Confidentialityfocuses on restricting unauthorized access.
* Integrityensures data remains unaltered, but does not address service continuity.
* Innovationis unrelated to the CIA triad.

NEW QUESTION 22
With expanded business opportunities and markets, a company needs to comply with theGeneral Data Protection Regulation (GDPR).
Which requirement should be expected for the company under this regulation?

Allow individuals to access, collect, or erase their personal information

Compensate individuals for revenue from the sale of their information

Disclose the software used to protect personal data

Notify individuals each time their personal information is viewed

UnderGDPR, individuals have the right to:
* Accesstheir personal data
* Request modifications or deletions(right to be forgotten)
* Restrict processing of their data
Companies must also ensuretransparency and data protectionby implementing encryption and security controls.
* Compensating individualsis not a GDPR requirement.
* Disclosing security softwareis not mandatory, only security measures in place.
* Notifying individuals every time data is viewedis unnecessary unless required by a breach.

NEW QUESTION 23
An attacker uses malicious software to disable network resources, demanding a ransom to restore access.
Which category describes the purpose of the attack?

Launch point

Data modification

Data export

Denial of availability

This describes aransomware attack, which falls underdenial of availabilitybecause it prevents users from accessing their data or systems until a ransom is paid. Attackers use encryption to lock files, disrupting operations.
* Data modificationrefers to unauthorized changes to information.
* Data exportinvolves stealing data rather than disabling access.
* Launch pointdescribes an attacker’s use of a compromised system to attack others.

NEW QUESTION 24
An organization is updating its information security policies in order to comply with thePersonal Information Protection and Electronic Documents Act (PIPEDA).
What should this organization expect to be required under this legislation?

Securely dispose of personally identifiable information

Compensate individuals for revenue from the sale of their information

Notify individuals each time their personal information is viewed

Disclose the software used to protect personal data

PIPEDArequires businesses in Canada to protectpersonal informationthrough security measures andproper disposal practices. This includessecure deletion of personal data when no longer neededto prevent unauthorized access.
* Compensating individuals for data salesis not a legal requirement.
* Notifying individuals of each data accessis unnecessary unless required by a breach.
* Disclosing security softwareis not mandated by PIPEDA.

NEW QUESTION 25
A company is developing a data protection methodology in order to improve data protection measures.
What is a strategy that should be used?

Use a variable network topology

Increase wireless access point range

Enhance physical resource security

Implement wired equivalent privacy (WEP)

Enhancing physical resource securityensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.
* Using a variable network topologydoes not directly protect data.
* Increasing wireless access point rangemay improve connectivity but does not enhance security.
* WEPis weak and should not be used for data protection.

NEW QUESTION 26
A developer is using shared functions for software code in order to reduce complexity, knowing that greater complexity and volume of code are harder to defend against attacks.
Which security principle is demonstrated in this scenario?

Economy of mechanism

Least common mechanism

Least privilege

Zero-trust model

Theeconomy of mechanismprinciple states that security systems should beas simple and small as possible.
Reducing complexity makes security mechanisms easier to understand, audit, and defend against attacks.
* Least common mechanismreduces shared resources to limit security risks.
* Least privilegerestricts access based on necessity.
* Zero-trust modelassumes no implicit trust in users or devices.

NEW QUESTION 27
A person is troubleshooting a network issue and needs to see details about network adapters and their settings.
Which Windows command should be used?

ipconfig

traceroute

nslookup

netstat

Theipconfigcommand in Windows provides details about a computer’s network adapters, including IP addresses, subnet masks, default gateways, and DNS settings. It is particularly useful for troubleshooting connectivity issues.
* traceroute(or tracert in Windows) is used to trace the path packets take to a destination.
* nslookupis used for querying DNS records.
* netstatprovides details about active network connections and listening ports, but not adapter configurations.

NEW QUESTION 28
In the process of setting up a Linux-based network system, a technician needs to determine if there is connectivity to a hostname.
Which command should be used?

ping

nslookup

ifconfig

dig

Thepingcommand in Linux is used to check network connectivity to a specific hostname or IP address. It sends ICMP Echo Request packets and measures response times.
* nslookupis used for DNS lookups, not connectivity testing.
* ifconfigdisplays network interface configurations but does not test connectivity.
* digis used for detailed DNS queries.

NEW QUESTION 29
An attacker changes a computer’s identification to appear as an authorized computer in a target network.
Which type of cyberattack is described?

Pharming

Man-in-the-middle attack

Session hijacking

IP address spoofing

IP address spoofingis a cyberattack where an attacker disguises their system by falsifying its IP address, making it appear as a trusted device in a network. This technique is used for bypassing security controls, launching denial-of-service (DoS) attacks, or impersonating legitimate users.
* Pharmingredirects users to fake websites to steal credentials.
* Man-in-the-middle attackintercepts communications between two parties.
* Session hijackingtakes over an active session but does not involve falsifying an IP address.

NEW QUESTION 30
An organization is the victim of an attack in which an attacker uses a forged employee ID card to deceive a company employee into providing sensitive information.
What is the type of cyberattack described in this scenario?

Brute-force attack

Man-in-the-middle attack

Social engineering

Pharming

Social engineeringinvolves manipulating people into divulging confidential information, often by impersonation, deception, or psychological tactics. Using aforged ID cardto gain trust and extract sensitive information is a classic example of social engineering.
* Brute-force attackattempts to guess passwords through automated methods.
* Man-in-the-middle attackintercepts communication but does not rely on deception.
* Pharmingtricks users into visiting fraudulent websites but does not involve impersonation.

NEW QUESTION 31
A company’s internal messaging system is being redesigned. The authentication procedures were so cumbersome that employees were using personal email to communicate.
What is the security principle implemented in this scenario?

Zero-trust model

Least common mechanism

Psychological acceptability

Fail-safe

Psychological acceptabilitystates that security measures should beuser-friendly and not overlyburdensome
. If security controls are too complex, users may bypass them, leading to weaker security. In this case, employees used personal email because authentication procedures were too cumbersome.
* Zero-trust modelenforces strict access control, not usability.
* Least common mechanismlimits shared resources.
* Fail-safeensures secure failure handling, not usability.

Loading …

Check your preparation for WGU Network-and-Security-Foundation On-Demand Exam: https://www.actualtorrent.com/Network-and-Security-Foundation-questions-answers.html

Tags: Network-and-Security-Foundation exam practice, Network-and-Security-Foundation latest test vce free, Network-and-Security-Foundation Test Free, Network-and-Security-Foundation valid test camp, Network-and-Security-Foundation valid visual cert exam, new Network-and-Security-Foundation test name

[Q17-Q31] Dumps for Free WGU Network-and-Security-Foundation Practice Exam Questions [May 08, 2026]

WGU Network-and-Security-Foundation Exam Syllabus Topics:

Be the first to reply

Leave a Reply Cancel reply

WGU Network-and-Security-Foundation Exam Syllabus Topics: