WGU D415 SOFTWARE DEFINED
NETWORKING FINAL TEST 2026
QUESTIONS WITH CORRECT ANSWERS
GRADED A+
◍ Dynamic Host Configuration Protocol (DHCP).
Answer: A network management protocol used to dynamically assign an
Internet Protocol (IP) address to any device, or node, on a network so they
can communicate using IP.
◍ Domain Name System (DNS).
Answer: a hierarchical decentralized naming system for computers, services,
or other resources connected to the Internet or a private network.
◍ SDLC Disposition Phase.
Answer: Information preservationMedia sanitizationHardware and software
disposal
◍ VM-FW-R4.
Answer: NIST 800-125B recommendation that states for both subnet-level
and kernel-based virtual firewalls, it is preferable that the firewall supports
rules using higher-level components or abstractions (e.g., security group) in
addition to the basic 5-tuple (source / destination IP address, source /
destination ports, protocol).
◍ Virtual Network Functions (VNFs).
Answer: Are the software implementations of network functions.
◍ Unified control plane of an SDN.
Answer: Consists of one or more SDN con trollers that use open APIs to
exert control over the underlying vSwitches or forwarding devices.
,◍ Application Level MTD.
Answer: Involves a change in the application required, source code, memory
mapping, and software version.
◍ Maximum Transmission Unit (MTU).
Answer: The size of the largest block of data that can be sent as a single
unit.
◍ Magnum.
Answer: OpenStack module that is an umbrella project that provides
containerization assistance. This module is still in development.
◍ Heat.
Answer: OpenStack module that helps expedite orchestration of applications
across multiple compute instances by using templates.
◍ Celiometer.
Answer: OpenStack module that monitors the NFVI and helps identify
bottlenecks and resource optimization opportunities.
◍ Defense in depth framework.
Answer: The first layer is a prevention mechanism that stops attacks from
getting into the networking system.The second layer is detection and
response mechanisms that watch activities on systems and networks to
detect attacks and repair the damageThe third layer is attack-resilient
technologies that enable the core elements, or, the most valuable systems, on
the network to survive attacks and continue to function.
◍ Virtual LANs (VLANs).
Answer: Protocol-based virtual networks that are logical local area networks
(LANs) based on physical LANs
◍ Routing Control Platform (RCP).
Answer: Proposed in for the provisioning of inter-domain routing over a
BGP network. Routing is done as a separate entity. Control from physically
distributed entities in a domain is logically centralized in a control plane.
, ◍ Northbound Interface (NBI).
Answer: Enables applications in the application layer to program the
controllers by making abstract data models and other functionalities
available to them.
◍ Weaponization.
Answer: Cyber attackers do not interact with the intended victim, instead
they create their attack.
◍ Benefits of NFV.
Answer: Automating the orchestration and management lets an NFVI be
more scalable and achieve better resource utilization.Using generic server
hardware that can act as any number of network devices instead of
specialized hardware that perform singular functions helps reduce both
operational and capital expenditures.virtualization offers carriers the ability
to offer pay-as-you-go services without huge up-front investment.Avoiding
proprietary hardware empowers administrators with a streamlined
provisioning process.
◍ The method of attacks.
Answer: There are two types of attack methods based on the intention of the
attacker called passive attacks and active attacks.
◍ PREROUTING.
Answer: NAT table chain that is done at first when a packet is received and
is thus routed based on where it is going (destination).
◍ Perimeter network.
Answer: A network added between a protected network and an external
network in order to provide an additional layer of security. A perimeter
network is sometimes called a DMZ.
◍ OpenStack.
Answer: An open-source cloud computing platform that has high market
penetration that includes a collection of interoperable modules that are used
to orchestrate large pools of compute, storage, and networking resources.
NETWORKING FINAL TEST 2026
QUESTIONS WITH CORRECT ANSWERS
GRADED A+
◍ Dynamic Host Configuration Protocol (DHCP).
Answer: A network management protocol used to dynamically assign an
Internet Protocol (IP) address to any device, or node, on a network so they
can communicate using IP.
◍ Domain Name System (DNS).
Answer: a hierarchical decentralized naming system for computers, services,
or other resources connected to the Internet or a private network.
◍ SDLC Disposition Phase.
Answer: Information preservationMedia sanitizationHardware and software
disposal
◍ VM-FW-R4.
Answer: NIST 800-125B recommendation that states for both subnet-level
and kernel-based virtual firewalls, it is preferable that the firewall supports
rules using higher-level components or abstractions (e.g., security group) in
addition to the basic 5-tuple (source / destination IP address, source /
destination ports, protocol).
◍ Virtual Network Functions (VNFs).
Answer: Are the software implementations of network functions.
◍ Unified control plane of an SDN.
Answer: Consists of one or more SDN con trollers that use open APIs to
exert control over the underlying vSwitches or forwarding devices.
,◍ Application Level MTD.
Answer: Involves a change in the application required, source code, memory
mapping, and software version.
◍ Maximum Transmission Unit (MTU).
Answer: The size of the largest block of data that can be sent as a single
unit.
◍ Magnum.
Answer: OpenStack module that is an umbrella project that provides
containerization assistance. This module is still in development.
◍ Heat.
Answer: OpenStack module that helps expedite orchestration of applications
across multiple compute instances by using templates.
◍ Celiometer.
Answer: OpenStack module that monitors the NFVI and helps identify
bottlenecks and resource optimization opportunities.
◍ Defense in depth framework.
Answer: The first layer is a prevention mechanism that stops attacks from
getting into the networking system.The second layer is detection and
response mechanisms that watch activities on systems and networks to
detect attacks and repair the damageThe third layer is attack-resilient
technologies that enable the core elements, or, the most valuable systems, on
the network to survive attacks and continue to function.
◍ Virtual LANs (VLANs).
Answer: Protocol-based virtual networks that are logical local area networks
(LANs) based on physical LANs
◍ Routing Control Platform (RCP).
Answer: Proposed in for the provisioning of inter-domain routing over a
BGP network. Routing is done as a separate entity. Control from physically
distributed entities in a domain is logically centralized in a control plane.
, ◍ Northbound Interface (NBI).
Answer: Enables applications in the application layer to program the
controllers by making abstract data models and other functionalities
available to them.
◍ Weaponization.
Answer: Cyber attackers do not interact with the intended victim, instead
they create their attack.
◍ Benefits of NFV.
Answer: Automating the orchestration and management lets an NFVI be
more scalable and achieve better resource utilization.Using generic server
hardware that can act as any number of network devices instead of
specialized hardware that perform singular functions helps reduce both
operational and capital expenditures.virtualization offers carriers the ability
to offer pay-as-you-go services without huge up-front investment.Avoiding
proprietary hardware empowers administrators with a streamlined
provisioning process.
◍ The method of attacks.
Answer: There are two types of attack methods based on the intention of the
attacker called passive attacks and active attacks.
◍ PREROUTING.
Answer: NAT table chain that is done at first when a packet is received and
is thus routed based on where it is going (destination).
◍ Perimeter network.
Answer: A network added between a protected network and an external
network in order to provide an additional layer of security. A perimeter
network is sometimes called a DMZ.
◍ OpenStack.
Answer: An open-source cloud computing platform that has high market
penetration that includes a collection of interoperable modules that are used
to orchestrate large pools of compute, storage, and networking resources.
