WGU D385 EXAM 2 2026 EXAM REVIEW
STUDY GUIDE BUNDLED QUESTIONS AND
ANSWERS PREMIUM
◉ What is the difference between response.text and
response.content?. Answer: - respone.text returns the response
content in Unicode
- response.content returns the response content in bytes
◉ TLS Handshake Steps. Answer: 1. Cipher Suite Negotiation
2. Key Exchange
3. Server Authentication
◉ What are Directives?. Answer: - key-value pairs
- used to parameterize HTTP headers
◉ Example of Max-Age Directive?. Answer: Strict-Transport-Security:
max-age=3600
◉ What is used to tell a browser that it should only be accessed via
HTTPS?. Answer: - HSTS (HTTP Strict-Transport-Security)
,◉ What Directive redirects HTTP requests to HTTPS?. Answer: -
SECURE_SSL_REDIRECT set to True
◉ What setting is used to suspend HTTPS redirects for some URLs?.
Answer: -SECURE_REDIRECT_EXEMPT
- list of regex URLs (strings)
◉ What setting will override the hostname for HTTPS redirects?.
Answer: - SECURE_SSL_HOST
◉ What setting, when set to FALSE, no longer authenticates the
server?. Answer: - verify
◉ How is the Session ID communicated between websites and
browsers?. Answer: - Set-Cookie : sessionid=<cookie-value>
◉ Set-Cookie Directive: Secure. Answer: - allows servers to resists
MITM attacks
- Example: Set-Cookie: sessionid=<session-id-value>; Secure
- prohibits the browser from sending the cookie back to the server
over HTTP
◉ What setting adds or removes the Secure directive?. Answer: -
SESSION_COOKIE_SECURE
, - adds/removes the Secure directive to the session ID Set-Cookie
header
- this setting is FALSE by default
◉ Set-Cookie Directive: Domain. Answer: - controls which hosts the
browser should send the session ID
Set-Cookie: sessionid=<session-id-value>; Domain=alice.com
- None is default setting
◉ What happens when the Domain directive is set to 'alice.com'?.
Answer: - the browser will now echo back the cookie to both
'alice.com' and 'sub.alice.com'
◉ Set-Cookie Directive: Max-Age. Answer: - declares an expiration
time for the cookie
Set-Cookie: sessionid=<session-id-value>; Max-Age=1209600
◉ What does Django use SECRET_KEY setting for?. Answer: - keyed
hashing
◉ OAuth Authorization Code Flow. Answer: 1. Requesting
authorization
2. Granting authorization
3. Performing token exchange
STUDY GUIDE BUNDLED QUESTIONS AND
ANSWERS PREMIUM
◉ What is the difference between response.text and
response.content?. Answer: - respone.text returns the response
content in Unicode
- response.content returns the response content in bytes
◉ TLS Handshake Steps. Answer: 1. Cipher Suite Negotiation
2. Key Exchange
3. Server Authentication
◉ What are Directives?. Answer: - key-value pairs
- used to parameterize HTTP headers
◉ Example of Max-Age Directive?. Answer: Strict-Transport-Security:
max-age=3600
◉ What is used to tell a browser that it should only be accessed via
HTTPS?. Answer: - HSTS (HTTP Strict-Transport-Security)
,◉ What Directive redirects HTTP requests to HTTPS?. Answer: -
SECURE_SSL_REDIRECT set to True
◉ What setting is used to suspend HTTPS redirects for some URLs?.
Answer: -SECURE_REDIRECT_EXEMPT
- list of regex URLs (strings)
◉ What setting will override the hostname for HTTPS redirects?.
Answer: - SECURE_SSL_HOST
◉ What setting, when set to FALSE, no longer authenticates the
server?. Answer: - verify
◉ How is the Session ID communicated between websites and
browsers?. Answer: - Set-Cookie : sessionid=<cookie-value>
◉ Set-Cookie Directive: Secure. Answer: - allows servers to resists
MITM attacks
- Example: Set-Cookie: sessionid=<session-id-value>; Secure
- prohibits the browser from sending the cookie back to the server
over HTTP
◉ What setting adds or removes the Secure directive?. Answer: -
SESSION_COOKIE_SECURE
, - adds/removes the Secure directive to the session ID Set-Cookie
header
- this setting is FALSE by default
◉ Set-Cookie Directive: Domain. Answer: - controls which hosts the
browser should send the session ID
Set-Cookie: sessionid=<session-id-value>; Domain=alice.com
- None is default setting
◉ What happens when the Domain directive is set to 'alice.com'?.
Answer: - the browser will now echo back the cookie to both
'alice.com' and 'sub.alice.com'
◉ Set-Cookie Directive: Max-Age. Answer: - declares an expiration
time for the cookie
Set-Cookie: sessionid=<session-id-value>; Max-Age=1209600
◉ What does Django use SECRET_KEY setting for?. Answer: - keyed
hashing
◉ OAuth Authorization Code Flow. Answer: 1. Requesting
authorization
2. Granting authorization
3. Performing token exchange
