A company wants to implement a cloud service to obtain access to virtual machines. The company wants to be able to choose the operating systems and configure each of the machines.What is the type of cloud service model that fits the needs of this company?
Answer(s): B
Infrastructure as a Service (IaaS) provides virtualized computing resources over the cloud, including virtual machines where users can install and configure their own operating systems and applications. It offers flexibility and scalability without requiring hardware investment. Examples include AWS EC2 and Microsoft Azure Virtual Machines.FaaS executes small code functions without infrastructure management.PaaS provides a managed platform but not full OS control.SaaS offers ready-to-use applications without infrastructure control.
An attacker uses malicious software to disable network resources, demanding a ransom to restore access.Which category describes the purpose of the attack?
This describes a ransomware attack, which falls under denial of availability because it prevents users from accessing their data or systems until a ransom is paid. Attackers use encryption to lock files, disrupting operations.Data modification refers to unauthorized changes to information.Data export involves stealing data rather than disabling access.Launch point describes an attacker's use of a compromised system to attack others.
An attacker issues commands to access a file on a network drive and overwrite it with new data.What is the purpose of the attack?
Answer(s): A
Data modification attacks involve unauthorized changes to stored data, altering information to mislead, disrupt, or destroy integrity. Attackers may modify logs, transactions, or records for fraud or sabotage.Launch point is when a system is used to attack others.Data export is the theft of data.Denial of availability makes data inaccessible, but does not necessarily modify it.
An organization is the victim of an attack in which an attacker gains unauthorized access to a computer to steal information and forward it via the internet to another attacker.What is the purpose of this attack?
Answer(s): C
This scenario describes a data export attack, where an attacker steals sensitive information (e.g., personal data, trade secrets, or financial records) and transfers it to another entity, often for malicious purposes.Launch point refers to using a compromised system for further attacks.Denial of availability disrupts access to resources.Data modification involves unauthorized changes rather than theft.
An organization is the victim of an attack in which an attacker targets a computer to use as a tool to infect and target other computers in a larger attack.What is the purpose of this attack?
Answer(s): D
A launch point attack occurs when an attacker compromises a system and uses it as a foothold to spread malware, conduct reconnaissance, or launch further attacks against other systems. Botnets and command-and-control (C2) servers operate this way.Denial of availability disrupts service, but does not spread attacks.Data export steals data instead of launching further attacks.Data modification changes existing information but does not involve propagating threats.
Post your Comments and Discuss WGU Network-and-Security-Foundation exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the Network-and-Security-Foundation content, but please register or login to continue.