WGU D315 Network and Security
Foundations – OA Exam Preparation
C
Terms in this set (216)
Database Server A company sets up a Demilitarized Zone (DMZ) to
host public-facing services, while keeping its internal
network
secure. The IT administrator must decide which devices to
place in the DMZ to balance accessibility and security. One
critical system, however, is kept in the internal network to
protect sensitive data and prevent direct exposure to the
internet.
Which of the following devices is not typically placed in the
DMZ?
Deauthentication Attack Employees at a company report that their devices are
frequently being disconnected from the corporate Wi-Fi
network throughout the day, even though the network signal
strength appears strong and the wireless access point is
functioning normally. The IT team suspects malicious activity
targeting the wireless network.
What attack type might this indicate?
,IDS A company's IT team installs a security tool to monitor
their network for unusual activity. One day, the tool
detects a
potential threat and sends an alert to the administrators,
notifying them of the suspicious traffic. However, the system
allows the traffic to continue without any automatic action
being taken to block it.
What type of system is being described in this scenario?
PIPEDA A company in Canada notifies its customers that their
personal information will be shared with a third-party logistics
provider to fulfill delivery services. The company provides
a clear
explanation of why the data is being shared.
Which regulation does this notification align with?
Accounting The IT security team at a large corporation receives a
notification of unusual activity on their network. They
review system logs that detail several failed login
attempts to an administrative account. Each log entry
includes the exact timestamp, the IP address of the device
attempting to log in, and the username used in the
attempts. These logs help the team trace the source of
the suspicious activity.
Which aspect of AAA is being demonstrated?
A college dormitory recently upgraded its The laptop is not at least Wi-Fi6 compatible
Wi-Fi network to use WPA3 encryption to
provide better security for students.
However, a student reports that their older
laptop cannot connect to the network, even
though other devices are working fine.
What is the most likely reason for this issue?
WPA2 A popular café offers free Wi-Fi to its customers and wants to
ensure the network is secure while remaining accessible to a
wide range of devices, including some older laptops and
smartphones. The café manager consults with a network
expert to choose an encryption standard that balances
security and compatibility.
Which encryption standard should they implement?
SQL injection An attacker targets an online shopping website by
entering malicious commands into the "Contact Us" form.
The website, unable to properly validate the input,
executes the commands. This allows the attacker to
retrieve sensitive customer information, including credit
card details, directly
from the database.
What type of attack is being performed in this scenario?
An organization is updating its information Disclose what personal identifiable information is being
security policies in order to comply with the collected and how it will be used
Personal Information Protection and
Electronic Documents Act (PIPEDA).
What should this organization expect to be
required to do under this legislation?
, IPS During a routine day at a corporate office, a security tool on
the network identifies a traffic pattern that matches a
known attack signature. Without waiting for manual
intervention, the tool immediately blocks the traffic to
prevent the attack from reaching its target.
What type of system is being described in this scenario?
A network administrator observes two Smurf attacks amplify the attack traffic using multiple
devices different types of attacks on their system. Into attack the victim
the first attack, a single device sends a high
volume of ICMP Echo Requests directly to
the target. In the second attack, the attacker
uses spoofed ICMP packets directed to a
broadcast address, causing multiple devices
to send ICMP Echo Replies to the victim.
Why is the second attack more damaging
than the first?
A global technology company identified a Psychological
Acceptability security risk caused by employees reusing
weak passwords across multiple
applications. To mitigate this issue, the
company implemented a Single Sign-On
(SSO) solution. With SSO, employees can
access all work applications using a single
set of login credentials. This streamlined
process reduces frustration and decreases
the likelihood of employees bypassing
security policies.
What network security design principle
does this scenario illustrate?
Ping Flood A network administrator notices that a server is
experiencing degraded performance and network
congestion. Upon investigation, they find that a single
device is sending a continuous stream of ICMP Echo
Requests directly to the
server, consuming its bandwidth and resources.
Which type of attack is most likely occurring?
Application Layer Firewall A financial institution implements a firewall to safeguard its
internal systems. When an external request is sent to the
company's web server, the firewall thoroughly inspects the
payload of the incoming packet. It detects a potential SQL
injection attempt embedded in the request and blocks the
packet from entering the network to prevent a data breach.
What type of firewall is being used in this scenario?
Foundations – OA Exam Preparation
C
Terms in this set (216)
Database Server A company sets up a Demilitarized Zone (DMZ) to
host public-facing services, while keeping its internal
network
secure. The IT administrator must decide which devices to
place in the DMZ to balance accessibility and security. One
critical system, however, is kept in the internal network to
protect sensitive data and prevent direct exposure to the
internet.
Which of the following devices is not typically placed in the
DMZ?
Deauthentication Attack Employees at a company report that their devices are
frequently being disconnected from the corporate Wi-Fi
network throughout the day, even though the network signal
strength appears strong and the wireless access point is
functioning normally. The IT team suspects malicious activity
targeting the wireless network.
What attack type might this indicate?
,IDS A company's IT team installs a security tool to monitor
their network for unusual activity. One day, the tool
detects a
potential threat and sends an alert to the administrators,
notifying them of the suspicious traffic. However, the system
allows the traffic to continue without any automatic action
being taken to block it.
What type of system is being described in this scenario?
PIPEDA A company in Canada notifies its customers that their
personal information will be shared with a third-party logistics
provider to fulfill delivery services. The company provides
a clear
explanation of why the data is being shared.
Which regulation does this notification align with?
Accounting The IT security team at a large corporation receives a
notification of unusual activity on their network. They
review system logs that detail several failed login
attempts to an administrative account. Each log entry
includes the exact timestamp, the IP address of the device
attempting to log in, and the username used in the
attempts. These logs help the team trace the source of
the suspicious activity.
Which aspect of AAA is being demonstrated?
A college dormitory recently upgraded its The laptop is not at least Wi-Fi6 compatible
Wi-Fi network to use WPA3 encryption to
provide better security for students.
However, a student reports that their older
laptop cannot connect to the network, even
though other devices are working fine.
What is the most likely reason for this issue?
WPA2 A popular café offers free Wi-Fi to its customers and wants to
ensure the network is secure while remaining accessible to a
wide range of devices, including some older laptops and
smartphones. The café manager consults with a network
expert to choose an encryption standard that balances
security and compatibility.
Which encryption standard should they implement?
SQL injection An attacker targets an online shopping website by
entering malicious commands into the "Contact Us" form.
The website, unable to properly validate the input,
executes the commands. This allows the attacker to
retrieve sensitive customer information, including credit
card details, directly
from the database.
What type of attack is being performed in this scenario?
An organization is updating its information Disclose what personal identifiable information is being
security policies in order to comply with the collected and how it will be used
Personal Information Protection and
Electronic Documents Act (PIPEDA).
What should this organization expect to be
required to do under this legislation?
, IPS During a routine day at a corporate office, a security tool on
the network identifies a traffic pattern that matches a
known attack signature. Without waiting for manual
intervention, the tool immediately blocks the traffic to
prevent the attack from reaching its target.
What type of system is being described in this scenario?
A network administrator observes two Smurf attacks amplify the attack traffic using multiple
devices different types of attacks on their system. Into attack the victim
the first attack, a single device sends a high
volume of ICMP Echo Requests directly to
the target. In the second attack, the attacker
uses spoofed ICMP packets directed to a
broadcast address, causing multiple devices
to send ICMP Echo Replies to the victim.
Why is the second attack more damaging
than the first?
A global technology company identified a Psychological
Acceptability security risk caused by employees reusing
weak passwords across multiple
applications. To mitigate this issue, the
company implemented a Single Sign-On
(SSO) solution. With SSO, employees can
access all work applications using a single
set of login credentials. This streamlined
process reduces frustration and decreases
the likelihood of employees bypassing
security policies.
What network security design principle
does this scenario illustrate?
Ping Flood A network administrator notices that a server is
experiencing degraded performance and network
congestion. Upon investigation, they find that a single
device is sending a continuous stream of ICMP Echo
Requests directly to the
server, consuming its bandwidth and resources.
Which type of attack is most likely occurring?
Application Layer Firewall A financial institution implements a firewall to safeguard its
internal systems. When an external request is sent to the
company's web server, the firewall thoroughly inspects the
payload of the incoming packet. It detects a potential SQL
injection attempt embedded in the request and blocks the
packet from entering the network to prevent a data breach.
What type of firewall is being used in this scenario?
