Network-and-Security-Foundation Exam Dumps and Practice Questions

Confidentiality in IT security ensures that sensitive data remains private and protected from unauthorized access. Encryption is a key measure used to maintain confidentiality by encoding data so that only authorized users can access it.

Integrity ensures that data remains accurate and unchanged.

Availability ensures that data is accessible when needed.

Consistency is not a component of the CIA triad.

Configuring switch port tracing helps detect unauthorized devices, such as rogue access points, that are connected to the network. Network administrators can use port security and intrusion detection systems (IDS) to monitor and block unauthorized access points.

Decreasing wireless range may limit exposure but does not actively detect rogue APs.

Disabling unnecessary services improves security but does not prevent rogue APs.

Monitoring traffic patterns helps detect anomalies but does not directly stop rogue APs.

Enhancing physical resource security ensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.

Using a variable network topology does not directly protect data.

Increasing wireless access point range may improve connectivity but does not enhance security.

WEP is weak and should not be used for data protection.

Phishing is a cyberattack where attackers impersonate legitimate entities (e.g., banks, companies) and send fraudulent emails or messages designed to trick recipients into revealing sensitive information, such as usernames, passwords, or financial details. The fake link in the email directs victims to a malicious site that captures their credentials.

IP address spoofing disguises a system's identity but does not involve email deception.

Session hijacking takes over an active session but does not involve email scams.

Man-in-the-middle attack intercepts communication rather than tricking users via emails.

Confidentiality ensures that sensitive information is only accessible to authorized individuals. Role-Based Access Control (RBAC) enforces confidentiality by restricting access based on a user's role within an organization, ensuring that only authorized users can view or modify certain data.

Integrity ensures data is not altered improperly.

Availability ensures access to resources but does not manage permissions.

Consistency is not a CIA triad component.