WGU Network Engineering and Security Foundation Exam - D315 Network and Security Foundation Exam Questions

Page: 1 / 14
Total 62 questions
Question 1

An organization has experienced injection attacks in the past and wants to take actions to mitigate this type of attack.

What should this organization do?



Answer : C

Server-side validation helps prevent SQL injection, command injection, and other input-based attacks by ensuring that user input is properly sanitized before being processed by the system. Parameterized queries and input validation should also be implemented to further reduce risk.

Detecting code vulnerabilities is helpful but not a direct mitigation technique.

Decreasing wireless range does not affect injection attacks.

Using WPA2 secures wireless networks but does not prevent injection attacks.


Question 2

When setting up a network, a technician needs a router that connects computers together and connects computers to the internet.

Which router should be used?



Answer : C

A broadband router is a type of network router that connects multiple computers within a local network while also providing internet access. It functions as a gateway between the local network and the internet by handling data packet transmission and routing. Broadband routers are widely used in small offices and homes because they offer essential networking services, including DHCP, NAT, and sometimes wireless connectivity.

Inter-provider border routers are used by ISPs to route data between different providers and do not serve as an internet gateway for end users.

Subscriber edge routers are typically deployed at the edge of an ISP's network to connect subscriber networks but do not provide full internet routing functionalities.

Core routers operate at the backbone level of a network, facilitating high-speed data transfer but not connecting end-user devices directly.


Question 3

What is a CIA triad component that involves keeping systems accessible for network users?



Answer : A

Availability ensures that systems, applications, and data remain accessible and operational for authorized users when needed. Organizations implement redundancy, failover mechanisms, and backup systems to maintain availability.

Integrity ensures that data remains accurate and unchanged.

Confidentiality protects sensitive data from unauthorized access.

Innovation is not a component of the CIA triad.


Question 4

Which component of the IT security CIA triad is a driver for enabling data encryption?



Answer : C

Confidentiality ensures that sensitive information is protected from unauthorized access. Encryption is a key mechanism used to maintain confidentiality by converting readable data into a secure format that can only be accessed with a decryption key.

Integrity ensures data is not altered improperly but does not directly relate to encryption.

Availability focuses on system uptime and accessibility.

Application is not a component of the CIA triad.


Question 5

Access to a company's information system requires a user to be within a valid geographic location and to enter a valid username and password.

Which concept does this scenario demonstrate?



Answer : B

Multifactor authentication (MFA) requires users to verify their identity using multiple factors, such as something they know (password), something they have (a token or phone), or somewhere they are (geolocation-based access control). Requiring both location verification and password authentication demonstrates MFA.

Certificate verification checks digital certificates for security but does not use multiple authentication factors.

User-based accounting logs user activities but does not verify identity.

Single sign-on (SSO) allows access to multiple systems with one login but is not necessarily MFA.


Question 6

A company is developing a data protection methodology in order to improve data protection measures.

What is a strategy that should be used?



Answer : C

Enhancing physical resource security ensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.

Using a variable network topology does not directly protect data.

Increasing wireless access point range may improve connectivity but does not enhance security.

WEP is weak and should not be used for data protection.


Question 7

An attacker uses a list of commonly used access credentials to attempt to gain access to an online account.

Which malicious attack strategy is represented in the scenario?



Answer : B

A dictionary attack is a password-cracking method that systematically tries common words, phrases, and predictable passwords (e.g., 'password123', 'admin2024') to gain access to an account. Attackers often compile large lists of weak or reused passwords.

Phishing tricks users into revealing passwords but does not systematically test multiple words.

Credential stuffing uses breached passwords rather than guessing from a list.

Social engineering manipulates users but does not rely on automated password attempts.


Page:    1 / 14   
Total 62 questions