WGU D415 – Software Defined Networking Actual Exam
2026/2027: Complete Exam-Style Questions with
Detailed Rationales | 100% Verified | Pass Guaranteed –
A+ Graded
TABLE OF CONTENTS
Section 1 | SDN Architecture and Layers | Q1 – Q10
Section 2 | Control Plane vs. Data Plane | Q11 – Q20
Section 3 | SDN Protocols (OpenFlow, NETCONF, RESTCONF) | Q21 – Q30
Section 4 | Network Virtualization and Overlays | Q31 – Q40
Section 5 | SDN Deployment, Security, and Use Cases | Q41 – Q50
Instructions: Choose the single best answer. Pass: 80% in 90 minutes.
══════════════════════════════════════
SECTION 1: SDN ARCHITECTURE AND LAYERS Q1 – Q10
══════════════════════════════════════
Question 1 of 50
A network architect is designing a new university campus network and wants to
implement a centralized SDN controller that manages all switches from a single point.
She is debating where the intelligence should reside.
A. The intelligence should be distributed across each switch to maintain local autonomy
during controller outages.
B. The intelligence should be centralized in the controller, with switches acting as
simple forwarding devices that follow flow rules. ✓ CORRECT
C. The intelligence should be split evenly between the controller and each switch to
balance processing load.
D. The intelligence should reside only in the edge switches, with core switches handling
traditional routing.
Correct Answer: B
,Rationale: Centralized SDN architecture moves the control intelligence to the controller,
leaving data plane devices as simple forwarding elements that enforce flow rules
pushed down by the controller. The most tempting wrong answer is A because while
local autonomy is a valid concern, it describes traditional distributed routing rather than
the fundamental SDN principle of centralized control. In real deployments, controller
redundancy and clustering address the outage concern without sacrificing the
centralized model.
Question 2 of 50
A data center engineer is explaining the three-layer SDN architecture to his team. He
describes the top layer as the network applications, the middle layer as the controller
platform, and the bottom layer as the physical network devices. A junior engineer asks
what the interface between the application layer and the controller is called.
A. The southbound API, which carries forwarding rules to the switches.
B. The east-west API, which synchronizes state between multiple controllers.
C. The management plane API, which handles device configuration and monitoring.
D. The northbound API, which exposes network state and capabilities to applications. ✓
CORRECT
Correct Answer: D
Rationale: The northbound API interfaces between the SDN application layer and the
controller, allowing applications to program the network by viewing topology and
pushing policies. The most tempting wrong answer is A because the southbound API
faces the opposite direction, connecting the controller to the data plane infrastructure.
In real implementations, RESTful northbound APIs enable orchestration platforms like
OpenStack to dynamically provision network resources.
Question 3 of 50
,A network operations team is migrating from a traditional Cisco IOS environment to an
SDN-based fabric. The senior engineer emphasizes that the new architecture must
maintain a clear separation between the layer that decides where traffic goes and the
layer that actually forwards packets.
A. The separation between the control plane and the data plane is the foundational
principle that enables SDN's centralized programmability. ✓ CORRECT
B. The separation between the management plane and the control plane is what allows
remote CLI access to the devices.
C. The separation between the application plane and the transport plane is what
enables Quality of Service marking.
D. The separation between the physical layer and the logical layer is what allows VLAN
segmentation to function.
Correct Answer: A
Rationale: The decoupling of the control plane, which makes forwarding decisions, from
the data plane, which executes them, is the architectural cornerstone that allows SDN
controllers to manage network behavior centrally. The most tempting wrong answer is D
because while physical and logical separation is useful, it does not capture the
functional decoupling that defines SDN architecture. In real networks, this separation is
what lets you upgrade routing logic without replacing forwarding hardware.
Question 4 of 50
A cloud provider is building an SDN solution where tenants can programmatically define
their own network topologies, firewalls, and load balancers without interacting with the
underlying physical hardware. The provider needs to know which SDN layer delivers this
tenant-facing abstraction.
A. The infrastructure layer, because it virtualizes the physical switches into logical
instances.
B. The control layer, because it directly programs the forwarding tables on each physical
switch.
, C. The application layer, because it hosts the virtual network functions and
tenant-facing network services. ✓ CORRECT
D. The transport layer, because it encapsulates tenant traffic into encrypted tunnels.
Correct Answer: C
Rationale: In the SDN architecture, the application layer hosts network applications such
as virtual firewalls, load balancers, and tenant management portals that consume
network resources through the controller's northbound API. The most tempting wrong
answer is A because the infrastructure layer is the physical hardware itself, not the
abstraction layer that tenants interact with. In real cloud deployments, platforms like
OpenStack Neutron operate at this application layer to provision tenant networks on
demand.
Question 5 of 50
An enterprise architect is evaluating an SDN controller that claims to support high
availability. She learns that the controller platform uses a clustered design where
multiple controller instances share network state and can take over for each other if one
fails.
A. This design violates the SDN principle of centralized control by distributing the
controller function.
B. This design maintains logically centralized control while providing physical
redundancy through controller clustering. ✓ CORRECT
C. This design creates a split-brain scenario that will corrupt the flow tables on all
switches.
D. This design forces every switch to maintain two simultaneous control plane
connections, which halves available bandwidth.
Correct Answer: B
Rationale: Logically centralized control does not preclude physical redundancy, and
controller clustering is the standard mechanism for achieving high availability without
fragmenting the network's logical control model. The most tempting wrong answer is A
2026/2027: Complete Exam-Style Questions with
Detailed Rationales | 100% Verified | Pass Guaranteed –
A+ Graded
TABLE OF CONTENTS
Section 1 | SDN Architecture and Layers | Q1 – Q10
Section 2 | Control Plane vs. Data Plane | Q11 – Q20
Section 3 | SDN Protocols (OpenFlow, NETCONF, RESTCONF) | Q21 – Q30
Section 4 | Network Virtualization and Overlays | Q31 – Q40
Section 5 | SDN Deployment, Security, and Use Cases | Q41 – Q50
Instructions: Choose the single best answer. Pass: 80% in 90 minutes.
══════════════════════════════════════
SECTION 1: SDN ARCHITECTURE AND LAYERS Q1 – Q10
══════════════════════════════════════
Question 1 of 50
A network architect is designing a new university campus network and wants to
implement a centralized SDN controller that manages all switches from a single point.
She is debating where the intelligence should reside.
A. The intelligence should be distributed across each switch to maintain local autonomy
during controller outages.
B. The intelligence should be centralized in the controller, with switches acting as
simple forwarding devices that follow flow rules. ✓ CORRECT
C. The intelligence should be split evenly between the controller and each switch to
balance processing load.
D. The intelligence should reside only in the edge switches, with core switches handling
traditional routing.
Correct Answer: B
,Rationale: Centralized SDN architecture moves the control intelligence to the controller,
leaving data plane devices as simple forwarding elements that enforce flow rules
pushed down by the controller. The most tempting wrong answer is A because while
local autonomy is a valid concern, it describes traditional distributed routing rather than
the fundamental SDN principle of centralized control. In real deployments, controller
redundancy and clustering address the outage concern without sacrificing the
centralized model.
Question 2 of 50
A data center engineer is explaining the three-layer SDN architecture to his team. He
describes the top layer as the network applications, the middle layer as the controller
platform, and the bottom layer as the physical network devices. A junior engineer asks
what the interface between the application layer and the controller is called.
A. The southbound API, which carries forwarding rules to the switches.
B. The east-west API, which synchronizes state between multiple controllers.
C. The management plane API, which handles device configuration and monitoring.
D. The northbound API, which exposes network state and capabilities to applications. ✓
CORRECT
Correct Answer: D
Rationale: The northbound API interfaces between the SDN application layer and the
controller, allowing applications to program the network by viewing topology and
pushing policies. The most tempting wrong answer is A because the southbound API
faces the opposite direction, connecting the controller to the data plane infrastructure.
In real implementations, RESTful northbound APIs enable orchestration platforms like
OpenStack to dynamically provision network resources.
Question 3 of 50
,A network operations team is migrating from a traditional Cisco IOS environment to an
SDN-based fabric. The senior engineer emphasizes that the new architecture must
maintain a clear separation between the layer that decides where traffic goes and the
layer that actually forwards packets.
A. The separation between the control plane and the data plane is the foundational
principle that enables SDN's centralized programmability. ✓ CORRECT
B. The separation between the management plane and the control plane is what allows
remote CLI access to the devices.
C. The separation between the application plane and the transport plane is what
enables Quality of Service marking.
D. The separation between the physical layer and the logical layer is what allows VLAN
segmentation to function.
Correct Answer: A
Rationale: The decoupling of the control plane, which makes forwarding decisions, from
the data plane, which executes them, is the architectural cornerstone that allows SDN
controllers to manage network behavior centrally. The most tempting wrong answer is D
because while physical and logical separation is useful, it does not capture the
functional decoupling that defines SDN architecture. In real networks, this separation is
what lets you upgrade routing logic without replacing forwarding hardware.
Question 4 of 50
A cloud provider is building an SDN solution where tenants can programmatically define
their own network topologies, firewalls, and load balancers without interacting with the
underlying physical hardware. The provider needs to know which SDN layer delivers this
tenant-facing abstraction.
A. The infrastructure layer, because it virtualizes the physical switches into logical
instances.
B. The control layer, because it directly programs the forwarding tables on each physical
switch.
, C. The application layer, because it hosts the virtual network functions and
tenant-facing network services. ✓ CORRECT
D. The transport layer, because it encapsulates tenant traffic into encrypted tunnels.
Correct Answer: C
Rationale: In the SDN architecture, the application layer hosts network applications such
as virtual firewalls, load balancers, and tenant management portals that consume
network resources through the controller's northbound API. The most tempting wrong
answer is A because the infrastructure layer is the physical hardware itself, not the
abstraction layer that tenants interact with. In real cloud deployments, platforms like
OpenStack Neutron operate at this application layer to provision tenant networks on
demand.
Question 5 of 50
An enterprise architect is evaluating an SDN controller that claims to support high
availability. She learns that the controller platform uses a clustered design where
multiple controller instances share network state and can take over for each other if one
fails.
A. This design violates the SDN principle of centralized control by distributing the
controller function.
B. This design maintains logically centralized control while providing physical
redundancy through controller clustering. ✓ CORRECT
C. This design creates a split-brain scenario that will corrupt the flow tables on all
switches.
D. This design forces every switch to maintain two simultaneous control plane
connections, which halves available bandwidth.
Correct Answer: B
Rationale: Logically centralized control does not preclude physical redundancy, and
controller clustering is the standard mechanism for achieving high availability without
fragmenting the network's logical control model. The most tempting wrong answer is A
