D315 WGU Test Questions with 100% Complete Solutions, Graded A+

Network devices - Switches, routers, and firewalls with access to data Compromised device - Device accessed by a malicious user or attacker Wireless networks - Networks vulnerable to attackers in close proximity Hardening - Process of securing and testing network devices Default passwords - Factory-set passwords that should be changed Unnecessary logins - Accounts not used by the network administrator Strong password policy - Requiring complex passwords and regular changes Unnecessary services - Optional features that increase the risk of attack Patching - Installing security updates to fix vulnerabilities Physical access - Ability to physically interact with a device Trusted network - Network authorized to make changes to a device Wireless network encryption - Configuring WPA2 or WPA3 for secure traffic Audit logs - Records of device activity for analysis and detection Backup - Creating copies of device configurations for restoration Authentication - Process of confirming a person's identity Microsoft Active Directory - Authentication system that confirms user identity via passwords Public Key Infrastructure (PKI) - Authentication system that uses certificates to validate website identity Authorization - Determines what a user may access after authentication Restrictive Permissions - Applying limited access to data and securing servers and network devices Data Leaks - Risk of unauthorized access to confidential data Malware Infection - Accidental infection of network data files by a user's infected computer AAA Interaction - Client communication with a radius server via the cloud Accounting - Process of verifying access control settings and providing a forensic trail Immutable Logs - Audit logs stored in an unchangeable form to prevent tampering MFA - Multi-factor authentication, an optional add-on to the authentication process 2FA - Another term for multi-factor authentication PIN - Personal Identification Number used as part of multi-factor authentication Biometric Scan - Facial, retinal, or fingerprint scan used for multi-factor authentication Touch ID - Fingerprint scan used for authentication on Apple devices Face ID - Facial recognition scan used for authentication on Apple devices Proximity-based Security - Automatic unlocking of devices when in close range Windows Hello - Mechanism on Microsoft Windows computers using fingerprint or facial recognition Wireless network attacks - Attacks on wireless networks that can be done remotely Denial of Service (DoS) attack - An attack that enables unauthorized access and traffic monitoring of a wireless network Deauth attack - A denial-of-service (DoS) attack where the attacker can force clients off a network WPA3 security - A security protocol that encrypts management packets in a wireless network WPA2 security - A security protocol that encrypts data traffic in a wireless network Fake Access attack - An attack where an attacker sets up an illegitimate wireless network to intercept data VPN tunnel - A secure connection that encrypts all traffic sent and received over a wireless network 802.1x - Network access control protocol for trusted network access WAP - Wireless Access Point used for network access RADIUS - Remote Authentication Dial-In User Service for validating credentials EAP - Extensible Authentication Protocol used for validating credentials Authorization Policies - Policies defined by a network administrator for determining user's access rights