WGU D488 - CASP+ EXAM QUESTIONS ANSWERED CORRECTLY LATEST UPDATE 2026
Design Secure Network Architecture - 25% - Answers Section 1
Identity and Access Management - Answers A framework of policies and technologies used to
manage digital identities and control user access to a resource within an organization
Password Policy - Answers Rules set to enforce strong password creation and management, including
requirements for length, history, complexity, and more.
Privileged Access Management - Answers A security practice that monitors and controls access to
critical systems and data by users with elevated access (e.g. admin accounts)
Password Complexity - Answers A set of rules designed to make a password stronger and more
difficult to crack or guess.
Kerberos - Answers A network authentication protocol that uses symmetric key cryptography to
securely authenticate users and services over the network.
Mandatory Access Control (MAC) - Answers A security model where access to resources is
determined by system-enforced policies. Access is granted based on labels or classifications. (e.g.
"Top Secret")
Attribute-Based Access Control (ABAC) - Answers A security model where access to resources is
determined by attributes such as user role, location, time of access, etc...
In-band authentication - Answers A security method where authentication occurs within the same
communication channel used to access the service or system. An example will include receiving a
verification token on the same device you are using to login.
Out-of-Band authentication - Answers A security method where authentication occurs using a
separate communication channel from the primary one. An example includes receiving a verification
email with a code to confirm your identity.
Challenge Handshake Authentication Protocol (CHAP) - Answers A secure authentication protocol
used to verify the identity of a user or device over the network by sending them a "challenge"
(random value) from the server to the client.
JSON Web Token - Answers A compact, URL-safe token format used for securely transmitting
information between two parties as a JSON object.
Trusted Platform Module (TPM) - Answers a hardware based security device used to store
cryptographic keys, passwords, and other sensitive data securely. This security device ensures that
the system hardware and software hasn't been tampered with.
Single Sign On (SSO) - Answers An authentication process that allows users to access multiple
applications or systems using single set of credentials.
Internet Protocol Security (IPSec) - Answers A suite of protocols used to secure IP communications by
encrypting and authenticating data packets transmitted over a network. Commonly used in VPN's.
Simple Network Management Protocol (SNMP) - Answers A protocol used for managing and
monitoring network devices in an IP network. Allows administrators to collect performance data,
configure devices, and receive alerts about issues or failures.
Extensible authentication protocol (EAP) - Answers An authentication framework used to provide
various methods of user authentication over a network. It is commonly used in wireless networks and
VPN's to support different forms of authentication like passwords, certificates, and tokens.
Open Authentication (OAuth) - Answers A simple authentication method where access is granted
without requiring credentials or any form of authentication. Typically used in unsecured networks
such as public wi-fi.
Secure Socket Layer (SSL) - Answers A cryptographic protocol designed to provide secure
communication over a computer network. SSL encrypts the data exchanged between a client and
server, ensuring confidentiality and integrity. SSL is now deprecated and has been replaced with the
Transport Layer Security (TLS) protocol.
Virtual Private Network (VPN) - Answers A technology that creates a secure, encrypted connection
over a public network (like the internet) to allow remote users or sites the ability to access a private
network safely.
Security Information and Event Management (SIEM) - Answers A security solution that collects,
analyzes, and correlates log and event data from across an organization's IT environment in real time.
Web Application Firewall (WAF) - Answers A security solution that monitors, filters, and blocks
malicious traffic to and from web applications.
Design Secure Network Architecture - 25% - Answers Section 1
Identity and Access Management - Answers A framework of policies and technologies used to
manage digital identities and control user access to a resource within an organization
Password Policy - Answers Rules set to enforce strong password creation and management, including
requirements for length, history, complexity, and more.
Privileged Access Management - Answers A security practice that monitors and controls access to
critical systems and data by users with elevated access (e.g. admin accounts)
Password Complexity - Answers A set of rules designed to make a password stronger and more
difficult to crack or guess.
Kerberos - Answers A network authentication protocol that uses symmetric key cryptography to
securely authenticate users and services over the network.
Mandatory Access Control (MAC) - Answers A security model where access to resources is
determined by system-enforced policies. Access is granted based on labels or classifications. (e.g.
"Top Secret")
Attribute-Based Access Control (ABAC) - Answers A security model where access to resources is
determined by attributes such as user role, location, time of access, etc...
In-band authentication - Answers A security method where authentication occurs within the same
communication channel used to access the service or system. An example will include receiving a
verification token on the same device you are using to login.
Out-of-Band authentication - Answers A security method where authentication occurs using a
separate communication channel from the primary one. An example includes receiving a verification
email with a code to confirm your identity.
Challenge Handshake Authentication Protocol (CHAP) - Answers A secure authentication protocol
used to verify the identity of a user or device over the network by sending them a "challenge"
(random value) from the server to the client.
JSON Web Token - Answers A compact, URL-safe token format used for securely transmitting
information between two parties as a JSON object.
Trusted Platform Module (TPM) - Answers a hardware based security device used to store
cryptographic keys, passwords, and other sensitive data securely. This security device ensures that
the system hardware and software hasn't been tampered with.
Single Sign On (SSO) - Answers An authentication process that allows users to access multiple
applications or systems using single set of credentials.
Internet Protocol Security (IPSec) - Answers A suite of protocols used to secure IP communications by
encrypting and authenticating data packets transmitted over a network. Commonly used in VPN's.
Simple Network Management Protocol (SNMP) - Answers A protocol used for managing and
monitoring network devices in an IP network. Allows administrators to collect performance data,
configure devices, and receive alerts about issues or failures.
Extensible authentication protocol (EAP) - Answers An authentication framework used to provide
various methods of user authentication over a network. It is commonly used in wireless networks and
VPN's to support different forms of authentication like passwords, certificates, and tokens.
Open Authentication (OAuth) - Answers A simple authentication method where access is granted
without requiring credentials or any form of authentication. Typically used in unsecured networks
such as public wi-fi.
Secure Socket Layer (SSL) - Answers A cryptographic protocol designed to provide secure
communication over a computer network. SSL encrypts the data exchanged between a client and
server, ensuring confidentiality and integrity. SSL is now deprecated and has been replaced with the
Transport Layer Security (TLS) protocol.
Virtual Private Network (VPN) - Answers A technology that creates a secure, encrypted connection
over a public network (like the internet) to allow remote users or sites the ability to access a private
network safely.
Security Information and Event Management (SIEM) - Answers A security solution that collects,
analyzes, and correlates log and event data from across an organization's IT environment in real time.
Web Application Firewall (WAF) - Answers A security solution that monitors, filters, and blocks
malicious traffic to and from web applications.
