Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
An attacker issues commands to access a file on a network drive and overwrite it with new data.
What is the purpose of the attack?
Data modification attacks involve unauthorized changes to stored data, altering information to mislead, disrupt, or destroy integrity. Attackers may modify logs, transactions, or records for fraud or sabotage.
Launch point is when a system is used to attack others.
Data export is the theft of data.
Denial of availability makes data inaccessible, but does not necessarily modify it.
A company is developing a data protection methodology in order to improve data protection measures.
What is a strategy that should be used?
Enhancing physical resource security ensures that servers, networking devices, and data storage facilities are protected from unauthorized physical access, theft, or tampering. This includes measures like biometric authentication, surveillance, and restricted access zones.
Using a variable network topology does not directly protect data.
Increasing wireless access point range may improve connectivity but does not enhance security.
WEP is weak and should not be used for data protection.
What is a CIA triad component that involves keeping systems accessible for network users?
Availability ensures that systems, applications, and data remain accessible and operational for authorized users when needed. Organizations implement redundancy, failover mechanisms, and backup systems to maintain availability.
Integrity ensures that data remains accurate and unchanged.
Confidentiality protects sensitive data from unauthorized access.
Innovation is not a component of the CIA triad.
A company is developing a disaster recovery plan for its internal network.
What is the CIA triad component targeted in the scenario?
Availability ensures that systems and data remain accessible and operational, even in the event of failures or attacks. A disaster recovery plan (DRP) focuses on restoring IT infrastructure and operations after incidents like hardware failures, cyberattacks, or natural disasters. Strategies include data backups, failover systems, and redundant architectures.
Confidentiality focuses on restricting unauthorized access.
Integrity ensures data remains unaltered, but does not address service continuity.
Innovation is unrelated to the CIA triad.
An organization has experienced injection attacks in the past and wants to take actions to mitigate this type of attack.
What should this organization do?
Server-side validation helps prevent SQL injection, command injection, and other input-based attacks by ensuring that user input is properly sanitized before being processed by the system. Parameterized queries and input validation should also be implemented to further reduce risk.
Detecting code vulnerabilities is helpful but not a direct mitigation technique.
Decreasing wireless range does not affect injection attacks.
Using WPA2 secures wireless networks but does not prevent injection attacks.
An organization is updating its information security policies in order to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).
What should this organization expect to be required under this legislation?
PIPEDA requires businesses in Canada to protect personal information through security measures and proper disposal practices. This includes secure deletion of personal data when no longer needed to prevent unauthorized access.
Compensating individuals for data sales is not a legal requirement.
Notifying individuals of each data access is unnecessary unless required by a breach.
Disclosing security software is not mandated by PIPEDA.
Access to a company's information system requires a user to be within a valid geographic location and to enter a valid username and password.
Which concept does this scenario demonstrate?
Multifactor authentication (MFA) requires users to verify their identity using multiple factors, such as something they know (password), something they have (a token or phone), or somewhere they are (geolocation-based access control). Requiring both location verification and password authentication demonstrates MFA.
Certificate verification checks digital certificates for security but does not use multiple authentication factors.
User-based accounting logs user activities but does not verify identity.
Single sign-on (SSO) allows access to multiple systems with one login but is not necessarily MFA.
Exam domains verified against: Official WGU Network-and-Security-Foundation exam guide, last checked October 2026.
This section of the exam measures skills of Network Support Technicians and describes how to choose suitable approaches that follow security policies and industry rules. It explains how organizations apply required standards and how basic compliance methods help reduce risks. Learners understand how to determine effective solutions that keep systems secure and properly maintained.
This section of the exam measures skills of IT Support Specialists and outlines the essential elements of network systems. It introduces how networks operate through devices, connections, and communication processes. Learners receive a simple and clear understanding of the main networking concepts used in current technology settings.
This section of the exam measures skills of Network Support Technicians and highlights the core practices used to protect organizational information. It explains how security measures keep operations running, ensure proper access to data, and maintain confidentiality. Learners see how these foundational security concepts contribute to a reliable and well protected network environment.
Common questions about the exam itself
