D315 Network and Security Fundamentals V2 Section 2 Study Plan Quiz (2nd Attempt) COMPLETE ACTUAL NE

D315 Network and Security Fundamentals V2 Section 2 Study Plan Quiz (2nd Attempt) COMPLETE ACTUAL NEW SOLUTION FALL 2026-2027 Western Governors University

D315 V2 Section 2 Study Plan Quiz (2nd Attempt) Points: 92.5/100

Correct

2.5/2.5 Points

1. Which of the following is a fake device designed to tempt intruders with unpatched and unprotected security vulnerabilities and false data? * IDS Honeypot Firewall Proxy

Correct

2.5/2.5 Points

2. An activist group infiltrates and defaces a corporate website to draw attention to an environmental issue. The group's members are best described as: * Black Hat Hacker

White Hat Hacker Grey Hat Hacker Hacktivist

Correct

2.5/2.5 Points

3. Which risk management strategy involves implementing security measures to decrease the probability of a risk happening or to lessen its effects should it occur? * Risk Acceptance Risk Transfer Risk Avoidance Risk Mitigation

Correct

2.5/2.5 Points

4. A malicious actor gains unauthorized access to a company's database and alters financial records, changing the amounts of several transactions. What principle of the CIA Triad is violated in this situation? * Availability Confidentiality Integrity Non-repudiation

Incorrect

0/2.5 Points

5. How can organizations reduce the risk associated with port scanning attacks? *

By frequently changing user passwords Using firewalls to block unnecessary ports

Disabling all ports for all services to avoid the issue.

Implementing anti-malware software

Correct

2.5/2.5 Points

6. Due to its location in a coastal area, a data center's operational continuity is at risk from hurricanes. This natural event is categorized as a: * Vulnerability Attack Threat Exploit

Correct

2.5/2.5 Points

7. Sam was just hired to work on the security team that will be attempting to compromise the company's network to discover what vulnerability exist. Which team did he get hired to? * Purple Blue White Red

Correct

2.5/2.5 Points

8. During a phone call, an individual claiming to be from the IT department asks for your password to address a system issue. This is an example of: *

Ransomware Port scanning Social engineering Malware infection

Incorrect

0/2.5 Points

9. What type of attack involves modifying network tables to associate the attacker's MAC address with the IP address of a legitimate user? * DNS spoofing ARP Poisoning IP spoofing SQL injection

Correct

2.5/2.5 Points

10. A user is upset that he has just been fired and decides to perform a ping flood attack on the email server. What type of attacker would this user be considered? *

Social engineer External threat Insider threat Hacker

Correct

2.5/2.5 Points

11. Which of the following is the best definition of a security Vulnerability? * A method or tool used to compromise security (program, script, or other mechanism).

Anything that has the potential to cause harm to your assets, like malware, hackers, or natural disasters.

A person or group that poses a threat, intending to carry out attacks or harm assets.

A weakness or flaw in hardware, software, or facilities that can be taken advantage of to compromise security

Incorrect

0/2.5 Points

12. A hacker uses a script that automatically injects SQL commands into web forms to steal data from a database. This script is an example of: * A vulnerability A risk An exploit A threat actor

Correct

2.5/2.5 Points

13. During an IT audit, it's discovered that an employee has been modifying sales records in the company’s database to inflate commission payments. Which aspect of the CIA triad has been breached? * Confidentiality Non-repudiation

Availability Integrity

Correct

2.5/2.5 Points

14.

Which term refers to the combination of the probability and potential consequences of a threat taking advantage of a vulnerability? * Threat Asset Risk Vulnerability

Correct

2.5/2.5 Points

15. A cybersecurity expert is legally hired by a corporation to find vulnerabilities in its network and strengthen its defenses. This expert is known as a: * Black Hat Hacker White Hat Hacker Grey Hat Hacker Script Kiddie

Correct

2.5/2.5 Points

16. What is the most effective method to reduce the risk posed by known software vulnerabilities? *

Disabling network access Regularly changing passwords Regularly applying software updates and patches Using older versions of software

Correct

2.5/2.5 Points

17. An organization wants to ensure that only authorized personnel can access the server room. Which of the following is the most effective solution? * A fence around the perimeter of the building Card key access system to the server room Card key access to the front entrance to the building Security Cameras

Correct

2.5/2.5 Points

18. In cybersecurity, what type of attack involves systematically trying all possible combinations of letters, numbers, and special characters to compromise a password * Brute Force Attack Dictionary Attack ARP Poisoning Password Guessing

Correct

2.5/2.5 Points

19. An attacker uses a zero-day exploit to install spyware on a corporate network, allowing them to monitor all internal communications. This attack compromises which principle of the CIA triad? * Integrity Confidentiality Authorization Availability

Correct

2.5/2.5 Points

20. What term is used to describe individuals who use pre-written hacking scripts or tools without necessarily understanding how they work? * White Hat Hacker Script Kiddie Black Hat Hacker Brute Force Attacker

Correct

2.5/2.5 Points

21. An employee at a financial institution accidentally emails a spreadsheet containing sensitive customer information to the wrong recipient. Which aspect of the CIA Triad is compromised in this scenario? * Integrity Availability

Confidentiality Authentication

Correct

2.5/2.5 Points

22. Which of the following best describes the most significant risk of allowing personal devices on company networks without a proper security policy? * Decreased productivity Increased risk of malware infection Decreased network performance Higher costs for the company

Correct

2.5/2.5 Points

23. Which type of attack involves manipulating a database by entering malicious code into input fields? * SQL Injection Denial of Service (DoS) Zero Day Port Scanning

Correct

2.5/2.5 Points

24. Which type of attack send emails claiming to be your bank and asking you to verify that your username and password are correct? *

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

Malware Phishing Man-in-the-middle Brute Force

Correct

2.5/2.5 Points

25. A distributed denial of service (DDoS) attack overwhelms a popular e-commerce website, causing it to crash. Which element of the CIA Triad is directly impacted? *

Confidentiality Availability Integrity Authentication

Correct

2.5/2.5 Points

26. Which risk management approach entails removing the threat or vulnerability altogether to entirely negate the related risk? * Risk Acceptance Risk Transfer Risk Avoidance Risk Mitigation

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

Correct

2.5/2.5 Points

27. How does changing default passwords on new devices and software installations improve security? * It ensures the password is easier to remember It makes the password recovery process simpler It guarantees compatibility with all devices It significantly reduces the chance of unauthorized access

Correct

2.5/2.5 Points

28. In cybersecurity, what term refers to a software vulnerability that is exploited before the software vendor releases a patch? * Zero Day Buffer Overflow Risk Transfer Threat

Correct

2.5/2.5 Points

29. Upon discovering a malware infection on a computer, what is the FIRST action that should be taken? * Immediately turn off all computers in the network Start installing updated anti-malware software on all network computers Isolate the infected computer from the network

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

Pay any ransom demanded by the malware

Correct

2.5/2.5 Points

30. Someone who breaks into digital systems with the intention of creating and spreading malware for financial gain would be considered a: * White Hat Hacker Grey Hat Hacker Black Hat Hacker Script Kiddie

Correct

2.5/2.5 Points

31. A banking system's transaction log is altered by an attacker to erase evidence of unauthorized fund transfers. This action directly compromises which principle of the CIA triad? * Availability Confidentiality Integrity Authentication

Correct

2.5/2.5 Points

32. A person who enjoys the challenge of breaching networks and bypassing security measures for the thrill, without malicious intent and sometimes pointing out flaws to the affected parties, can be termed a: *

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

Black Hat Hacker White Hat Hacker Grey Hat Hacker Script Kiddie

Correct

2.5/2.5 Points

33. What type of attack floods a network with ICMP echo request packets, amplifying the attack by using a large number of hosts? * Smurf Attack Ping Flood Ping Sweep Ping of Death

Correct

2.5/2.5 Points

34. Which risk management strategy is illustrated by continuing to use a network device with a known risk without implementing any mitigating security measures? * Risk Acceptance Risk Transfer Risk Avoidance Risk Mitigation

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

Correct

2.5/2.5 Points

35. An employee loses a laptop containing unencrypted personal data of clients. Which principle of the CIA triad is primarily compromised? * Confidentiality Integrity Availability Authentication

Correct

2.5/2.5 Points

36. In the context of IT security, wiretapping is considered: * A physical security measure A type of passive attack A form of active attack A legal method of network monitoring

Correct

2.5/2.5 Points

37.

An attacker is trying to infiltrate the network from an offsite location. What type of threat does this attacker represent? * Social engineer Insider threat Script kiddie

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

External threat

Correct

2.5/2.5 Points

38. A government-sponsored group launches cyber-attacks against another country's critical infrastructure to destabilize its economy. This group is best described as: *

Hacktivist Black Hat Hacker White Hat Hacker Nation-State

Correct

2.5/2.5 Points

39. A healthcare provider's patient portal becomes inaccessible due to a misconfigured firewall that blocks incoming patient traffic. This scenario primarily compromises which principle of the CIA triad? * Confidentiality Integrity Availability Non-repudiation

Correct

2.5/2.5 Points

40. During a network upgrade, an administrator mistakenly cuts off the backup data center from the main network. This error leaves the organization without a failover

8/15/25, 6:48 PM

D315 V2 Section 2 Study Plan Quiz (2nd Attempt)

option in case of a primary data center failure. What aspect of the CIA triad has been compromised? * Confidentiality Integrity Availability Authenticity