(Top QUALITY 2024/2025 EXAM REVIEW) WGU C172 - Networking and Security Foundations - Security Portion. Exam Questions and answers. Graded A+

WGU C172 - Networking and Security Foundations - Security Portion. Exam Questions and answers. Graded A+ What is an example of a networking attack? Having insecure passwords that a hacker runs a dictionary based attack against. What is an example of a social engineering attack? Receiving an bad email (phishing). Happen because humans don't see it coming. What is an APT? Advanced Persistent Threat. A virus that sits and waits until it is triggered. Can be used for ransomware. The virus is active on backups if it has been sitting for long enough. What is the defense against Zero-Day attacks? Almost none. IPS vendors have services that allow administrators to forward unknown or suspicious code patterns to the vendor for analysis. What is wiretapping? Refers to any process that allows an attacker to electronically eavesdrop on a conversations, whether between two humans or two computers. What is SQL injection? Inserting a database (SQL) command in a text field and having it run. How to defend against SQL injection? Sanitize input! What is a buffer overflow? When an application receives more data than it can handle - it exposes system memory How to defend against buffer overflow? Enforce Bounds checking Non-executable Stack (NX-Bit) What is spoofing? Impersonating the sender and receiver of traffic. What is a man-in-the-middle attack? The attacker spoofs itself to seem like the real server, captures an outgoing request, spoofs itself to seem like the real client, sends the request to the real server, receives the response from the real server and forwards the response on to the real client so nobody knows. What is ARP poisoning? 2 A method attackers use to cause an Ethernet switch to flood all traffic to every port on the switch, including the attacker's computer. What is a Denial-of-Service attack? Overwhelming a victim with enormous amounts of useless traffic. What is a ping flood? Overwhelms a victim's computer with an immen