WGU D315 PRE-ASSESSMENT; NETWORK AND SECURITY FOUNDATIONS EXAM QUESTIONS AND ANSWERS UPDATED 2024/2025 (100% CORRECT)

Which OSI layer is related to the function of the IP protocol suite? a. Transport b. Network c. Data Link d. Session - Correct Answer-Network Which OSI layer is responsible for organizing how bits are passed over the physical layer between devices within the same collision domain? a. Frame b. Connection c. Transport d. Data Link - Correct Answer-Data Link Which OSI layer would define the scope of a protocol that makes sure packets of data are received correctly and resends them if they are not? a. Validation b. Transmission c. Transport d. Connection - Correct Answer-Transport Which protocol suite performs functions of OSI layer 4? a. IPX b. MAC c. CSMA/CD d. TCP - Correct Answer-TCP Which type of Ethernet cable can maintain 10Gbps transmission speeds through the course of its maximum 100-meter length? a. CAT 5e b. CAT 5 c. CAT 3 WGU D315 PRE-ASSESSMENT; NETWORK AND SECURITY FOUNDATIONS EXAM QUESTIONS AND ANSWERS 2024/2025 | 100% CORRECT d. CAT 6a - Correct Answer-CAT 6a Which Internet access technology uses ordinary telephone wires for data transmission? a. DSL b. Cable c. Wi-Fi d. Hotspot - Correct Answer-DSL Which device is used to organize network cables as they run between switches and other network devices? a. Jack b. Hub c. Patch Panel d. Router - Correct Answer-Patch Panel Which network device is used to connect two or more network segments by performing OSI layer 3 functions like packet-forwarding? a. Router b. Repeater c. Wire d. Switch - Correct Answer-Router Which network device is used to convert between digital information from a LAN and analog signals for transmission over a standard telephone wire? a. Repeater b. Modem c. Signal Generator d. Bit Stretcher - Correct Answer-Modem Which device could be used to send commands to the mainframe for remote execution in early mainframe installations? a. Distributed Screens b. Dumb Terminals c. Execution Displays d. Command Receivers - Correct Answer-Dumb Terminals Which device is responsible for implementing network address translation (NAT)? a. Modem b. Router c. NIC d. Switch - Correct Answer-Router Which command produces the following output? Non-authoritative answer: Name: Address: 172.217.11.132 a. dig b. nslookup d. whois d. nmap - Correct Answer-nslookup Which command should be used to manually enter the default gateway for a computer? a. route b. ipconfig c. arp d. netstat - Correct Answer-route Which network diagnostic tool displays the path packets take between two endpoints? a. ifconfig b. traceroute c. ftp d. nslookup - Correct Answer-traceroute Which network type is used to wire multiple PCs to a home router? a. LAN b. PAN c. MAN d. WAN - Correct Answer-LAN An office's infrastructure connects network devices and printers through a central access point without the use of cabling. Which network type does this office use? a. WLAN b. WAN c. CAN d. SAN - Correct Answer-WLAN What type of medium is commonly used within a 1000 Mbps Ethernet network? a. CAT 5 b. CAT5e c. Coax d. Wireless - Correct Answer-CAT5e Which network topology is shown in the following diagram? a. Full mesh b. Star c. Bus d. Ring - Correct Answer-Full Mesh Which network topology is being implemented when each node connects to exactly two other nodes, forming a single continuous pathway for signals through each node? a. Star b. Full Mesh c. Ring d. Bus - Correct Answer-Ring In which physical LAN topology are nodes connected to each other with a backbone cable that loops around and ends at the same point it started? a. Ring b. Bus c. Star d. Tree - Correct Answer-Ring Which OSI layer ensures error-free packets? a. Application b. Transport c. Session d. Presentation - Correct Answer-Transport Which topology uses a switch or hub to connect to all devices in the same network? a. Mesh b. Ring c. Star d. Bus - Correct Answer-Star Which cloud service provides hardware, operating systems, and web servers but not end-user applications? a. IaaS b. PaaS c. SaaS d. RaaS - Correct Answer-PaaS Which cloud model provides an exclusive cloud computing service environment that is shared between two or more organizations? a. Public b. Private c. Community d. Hybrid - Correct Answer-Community Which type of software is used to provide virtualization? a. Database b. Hypervisor c. Antivirus d. Spreadsheet - Correct Answer-Hypervisor A user that does not want to be identified while communicating on a network uses an application to alter the computer's identity. Which type of exploit is being perpetrated? a. Denial-of-service b. ARP poisoning c. Smurf attack d. Spoofing - Correct Answer-Spoofing An attacker attempts to misdirect traffic on a network back to the attacker by corrupting the network computer's cache of IP address to MAC address mappings that are cached. Which exploit is the attacker perpetrating? a. Port scanning b. Wiretapping c. Denial-of-service d. ARP poisoning - Correct Answer-ARP poisoning Which exploit actually breaches the physical medium or uses devices to monitor signals from outside the physical medium itself? a. Spoofing b. Wiretapping c. Sniffing d. Port scanning - Correct Answer-Wiretapping Which type of attack can overwhelm a web server by inserting more data into a web form than the system was configured to hold? a. Buffer overflow b. ARP poisoning c. Session hijacking d. Cross-site scripting - Correct Answer-Buffer overflow Which type of attack sends an email claiming to be from a reputable business in order to entice the recipient to provide sensitive information? a. Denial-of-service b. Phishing c. Password attacks d. Man-in-the-middle - Correct Answer-Phishing A user on a network is planning to launch an exploit against a coworker in a neighboring department. The user needs to identify the IP address of a coworker in the desired department. Which tool or utility will allow the user to watch network traffic in real time to identify a target? a. Port scan b. Antivirus software c. Sniffer d. Port redirection - Correct Answer-Sniffer Which group of attackers is typically used for penetration testing? a. Red Team b. Blue Team c. White Team d. Gray Team - Correct Answer-Red Team Which type of attack exploits an unpatched software vulnerability? a. Zero-day b. Brue-force c. Diffie-Hellman d. Man-in-the-middle - Correct Answer-Zero-day A company has the policy that all new user passwords are P@ssw0rd but does not require new users to change their password. An employee randomly tries a coworker's account with the new user password to see if they can log in as the coworker. Which type of vulnerability does this create? a. BYOD b. Weak password c. Default password d. Misconfigured firewall rules - Correct Answer-Default password An employee that does not want to miss emails from important clients sets up her cellular smartphone to allow her to check email. Unfortunately, she does not install antivirus software on the cellular phone. What type of vulnerability is represented? a. Industry threat b. Misconfigured firewall rules c. Weak passwords d. BYOD/Mobile - Correct Answer-BYOD/Mobile What is the definition of vulnerability, in computer security? a. It is a weakness which can be exploited by a threat, such as an attacker, to perform unauthorized actions within a computer system. b. It is a possible danger that might exploit a weakness to breach security and therefore cause possible harm. c. It is an action taken by a threat that exploits a weakness that attempts to either block authorized access to an asset or to gain unauthorized access to an asset. d. It is the potential of a threat to exploit a weakness via an attack. - Correct Answer-It is a weakness which can be exploited by a threat, such as an attacker, to perform unauthorized actions within a computer system. What is required to establish a secure connection to a remote network over an insecure link? a. Virtual Private Network (VPN) service b. Linux c. Command Line Interface d. TOR Network - Correct Answer-Virtual Private Network (VPN) service An organization is concerned about brute force attacks. How should the organization counter this risk? a. Install a mantrap and biometric scanner at the entrance of its data center. b. Implement a system hardening policy that ensures operating system updates and software patches are installed regularly. c. Institute a log-in policy that locks users out of an account after three failed password attempts. d. Initiate role-based access to its systems to reduce the possibility of escalated privileges. - Correct Answer-c. Institute a log-in policy that locks users out of an account after three failed password attempts. An organization suffers a social engineering attack that results in a cybercriminal gaining access to its networks and to its customers' private information. How can the organization mitigate this risk in the future? a. Update user antivirus software to the latest version b. Implement a stronger password policy c. Provide regular cybersecurity training for employees d. Install a sophisticated intrusion detection system - Correct Answer-c. Provide regular cybersecurity training for employees An attacker plans to exploit flaws in an operating system to gain access to a user's computer system. What is a prevention mechanism for this type of attack? a. Firewall b. Patching c. Antivirus d. Virtual Private Network (VPN) - Correct Answer-b. Patching An unauthorized third-party has gained access to a company network. How can they be prevented from deleting data? a. Access controls b. Physical controls c. Biometrics d. Man trap - Correct Answer-a. Access controls An attacker has gained access to the passwords of several employees of a company through a brute force attack. Which authentication method would keep the attacker from accessing the employees' devices? a. MFA (multi-factor authentication) b. AAA (authentication, authorization, and accounting) c. PKI (public key infrastructure) d. TCP/IP (transmission control protocol/internet protocol - Correct Answer-a. MFA (multi-factor authentication)