WGU Network-and-Security-Foundation Exam Dumps

The dig command in Linux is used for DNS troubleshooting. It queries DNS records and provides detailed information about domain name resolutions.

traceroute tracks the path packets take to a destination but does not diagnose DNS.

netstat lists active connections, not DNS records.

ifconfig is used for managing network interfaces.

Credential stuffing is a cyberattack where attackers use stolen username-password combinations from one breach to try logging into other services, exploiting users who reuse passwords. Automated tools test multiple credentials against multiple sites, leading to unauthorized access.

Brute-force attack systematically tries all possible passwords but does not use breached data.

Session hijacking intercepts active user sessions but does not use stolen credentials.

Social engineering manipulates users into revealing credentials, rather than using breached data.

Restricting physical access to data storage facilities is a critical part of database security. Even with strong cybersecurity measures, unauthorized physical access to servers can lead to breaches. Security strategies include biometric authentication, surveillance cameras, and restricted entry zones.

Disclosing breaches is required by compliance laws but does not protect data proactively.

Developing algorithms improves security but is not a fundamental checklist item.

Outsourcing data management can introduce security risks if not properly controlled.

Pharming is an attack that manipulates the Domain Name System (DNS) to redirect users to fraudulent websites without their knowledge. Attackers poison DNS records or compromise routers to reroute traffic to malicious sites designed to steal information.

Brute-force attack involves password guessing, not domain manipulation.

IP address spoofing disguises a device's identity but does not alter DNS records.

Session hijacking takes over active user sessions but does not redirect websites.

Session hijacking occurs when an attacker takes over an established connection between two devices, often by stealing session tokens or manipulating network traffic. This allows the attacker to impersonate a legitimate user and gain unauthorized access.

Dictionary attack involves password guessing, not hijacking active connections.

Social engineering tricks users into providing information but does not hijack sessions.

IP address spoofing disguises the attacker's identity but does not necessarily take over a session.