network and security foundation practice exam

A small business enables multiple devices on its private network to share a single public IP address when accessing the internet. This setup hides the internal IP addresses of devices from external networks. Which network technology concept is being utilized in this scenario?

NAT

A large enterprise uses a network service that automatically assigns IP addresses to client devices, ensuring each device receives the appropriate network configuration without manual intervention. Which network technology concept does this scenario illustrate?

DHCP

Which term describes a configuration where multiple networks are connected over a large geographic area, sharing data and resources efficiently?

WAN

Which network topology connects all nodes to a central device, like a switch, to ensure minimal disruption when a single link fails?

Star

What type of device connects different networks and determines the best path for data transmission?

Router

A network administrator on a Windows computer wants to test the connectivity to a remote server and measure the response time. Which network troubleshooting command should the administrator use?

ping

A Linux system administrator needs to view a server's current network configuration details, such as IP address and subnet mask. Which command should they use?

ifconfig

An administrator on a Windows machine wants to check how the local DNS server resolves a particular domain name to an IP address. Which command should the administrator use?

nslookup

When troubleshooting DNS issues on a Linux system, which command should you use to query DNS servers to resolve domain names?

dig

Which command on Linux provides detailed information about current network connections?

netstat

Which OSI model layer provides end-to-end data transmission services and ensures complete data transfer?

Transport layer

Which OSI layer is responsible for logical addressing and routing packets between devices across different networks?

Network layer

At which OSI layer should you categorize an Ethernet switch that forwards frames based on MAC addresses?

Data link layer

A router determines the best path for data packets to travel across multiple networks. At which OSI layer does the router primarily operate?

Network layer

When a user accesses a website using HTTPS, at which TCP/IP layer does the HTTPS protocol operate?

Application layer

Which type of cloud service allows users to develop and deploy applications on a platform without managing the underlying infrastructure?

Platform as a service [PaaS]

A company uses an email service that requires no installation or maintenance of the application on local devices. Which cloud model does this describe?

Software as a service [SaaS]

Which virtualization technology enables multiple operating systems to run on a single physical machine?

Hypervisors

A business uses a third-party service to host its virtual desktops and provide secure remote access to employees. Which type of solution is being used?

Virtual desktop infrastructure [VDI]

A company uses its on-premises data center to store sensitive data while running some customer-facing applications in a public cloud environment. They have integrated both environments, enabling data and applications to move between them seamlessly. Which type of virtual and cloud computing solution does this scenario describe?

Hybrid cloud

An attacker initiates a distributed denial-of-service (DDoS) attack on a corporate web server. Which type of risk is being exploited?

Availability risk

A company's IT department discovers malware that is logging keystrokes and transmitting them to an external server. Which threat type describes this situation?

Data exfiltration

Which situation is classified as a physical security risk to a network?

Power outage

An attacker uses an organization's poorly secured Wi-Fi network to access internal resources. Which term describes the Wi-Fi network in this scenario?

Vulnerability

A user receives an email impersonating the IT department and asking for login credentials. Which type of threat is this?

Phishing

A network scan reveals that a company's database server is running outdated software with known vulnerabilities. Which type of risk does this scenario describe?

Vulnerability

An attacker intercepts unencrypted data being transmitted over a network. What is the attacker exploiting in this scenario?

Data confidentiality

Which situation is an example of a social engineering attack?

A phishing email requesting login credentials

Employees use personal devices to access the corporate network without adequate security measures. Which type of risk does this pose?

BYOD

A company uses a firewall to block unauthorized traffic from reaching its internal network. Which role does the firewall serve in this scenario?

Safeguard

Which aspect of the CIA triad is addressed by encrypting sensitive emails before transmission to ensure only the intended recipient can read them?

Confidentiality

A hospital implements digital signatures to verify that electronic health records are not altered during transmission. Which part of the CIA triad does this action address?

Integrity

A disaster recovery system is installed to ensure that data can be quickly restored in case of a failure. Which part of the CIA triad does this primarily address?

Availability

Which aspect of the CIA triad is addressed by restricting access to sensitive customer information using role-based access control?

Confidentiality

A software development company employs hash functions to ensure that code deployed to clients has not been tampered with. Which category of the CIA triad is this ensuring?

Integrity

An organization deploys multifactor authentication (MFA) to ensure only authorized users can log in to its systems. Which CIA triad component does this primarily support?

Confidentiality

A company schedules regular backups of its critical systems to mitigate the impact of hardware failure. Which CIA triad component does this action support?

Availability

An organization has decided to encrypt sensitive emails before sending them, ensuring only the intended recipient can read their contents. Which aspect of the CIA triad does this practice address?

Confidentiality

A bank employs a hashing algorithm to verify that transaction logs have not been altered. Which CIA triad category does this measure support?

Integrity

A government agency ensures that emergency response systems are operational 24/7 to guarantee service access during a crisis. Which CIA triad component does this support?

Availability

Which design principle is demonstrated by separating public-facing servers in a DMZ from internal network resources?

Segmentation

Which network design principle applies when implementing firewalls and intrusion detection systems [IDS]?

Defense in depth [DiD]

Which principle is illustrated by requiring separate accounts for admin and user roles?

Separation of duties

Which principle is implemented when configuring devices to only run necessary services?

Minimization

Which action mitigates a denial-of-service (DoS) attack?

Limiting incoming traffic

An attacker installs malicious software on endpoints. Which solution prevents this?

Enforcing application safelisting

What mitigates an attack involving spoofed email messages?

Email filtering with domain authentication

Which solution addresses an attack that captures unencrypted data packets?

Using encryption protocols [e.g., TLS]

Which method secures sensitive files stored on a server?

Encrypting files at rest

How can a company secure an application against SQL injection attacks?

Input validation

What secures data during transmission across public networks?

TLS encryption

Which solution ensures application configurations remain secure?

Using configuration management tools

Which AAA category is involved when logs are analyzed to determine user actions?

Accounting

Which AAA category involves verifying a user's identity with a password?

Authentication

Which AAA process limits a user's access to specific files?

Authorization

Which AAA function tracks user activities during a session?

Accounting

Which governance framework ensures a company complies with data protection laws?

Regulatory compliance policies

Which governance solution ensures changes to IT systems are reviewed and approved?

Change management policies

Which governance process ensures employees are trained in security protocols?

Security awareness training

Which governance solution establishes guidelines for data classification?

Data classification policies