WGU D315 ACTUAL EXAM PAPER 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ Which statement is true when comparing AES encryption to Triple DES
(3DES)?a. AES requires less CPU utilization and uses a larger block size
than 3DE
S. b. 3DES requires less CPU utilization and uses a larger block size than
AE
S. c. 3DES is a superior encryption protocol due to the triple nature.d. AES
was designed to run on high-end hardware, ensuring speedy throughput..
Answer: a. AES requires less CPU utilization and uses a larger block size
than 3DES.
◍ In the OSI model, what is the primary function of the Network layer?Allows
applications to establish, use, and end a connectionRoutes data between
networksTransmits data framesEnsures that packets are delivered with no
loss or duplication.
Answer: Routes data between networks
◍ What device routes packets between networks using IP addresses?.
Answer: Router (Layer 3)
◍ Diana is investigating suspicious software installed on a machine and would
like to identify any network connections made by that machine. Which one
of the following tools can best assist her with this task by running it on the
target machine?netstatSnortnetcatnmap.
Answer: netstat
◍ A malicious user was able to perform a password brute force attack on a
human resource email account and is now reading through all their emails.
Which category of the CIA triad was
compromised?AuthenticationConfidentialityAvailabilityIntegrity.
, Answer: Confidentiality
◍ What does the CIA Triad stand for?.
Answer: Confidentiality, Integrity, Availability
◍ What type of attack is a DoS or DDoS?.
Answer: Denial of Service attack that overloads a system.
◍ What is the function of an Application Firewall?.
Answer: To perform deep inspection of traffic at the application layer.
◍ What are the three components of AAA in security?.
Answer: Authentication, Authorization, Accounting
◍ What is the primary function of a firewall?.
Answer: Filters traffic based on security rules (Layer 3-7)
◍ For data that is at rest, what is the best method to protect the
data?FirewallEncryptionBackup data on the serverPlace locks on all server
racks and cabinets, enforce AAA for all assets and deploy a firewall.
Answer: Encryption
◍ What is the purpose of network segmentation?.
Answer: To improve security and performance by dividing a network into
smaller parts.
◍ A switch forwards data only to the port that are connected to the destination
device. It knows which port to forward it to based on which value?*Conf
valueIP addressPort NumberMAC Address.
Answer: MAC Address
◍ What does WEP stand for and why is it considered weak?.
Answer: Wired Equivalent Privacy; it is deprecated due to security
vulnerabilities.
◍ What command tests connectivity using ICMP?.
Answer: Ping
◍ A network admin is configuring an application and needs to be sure that port
, 4432 is open what tool should the admin
use?PingnetstatnmapTCP_Function.
Answer: nmap (Network Mapper)It is an open-source Linux command-line
tool that is used to scan IP addresses and ports in a network and to detect
installed applications.
◍ What is the difference between a Red Team and a Blue Team?.
Answer: Red Team conducts offensive testing; Blue Team focuses on
defense.
◍ What is the most common network topology?.
Answer: Star topology
◍ What is the primary difference between a Type 1 and Type 2 hypervisor?.
Answer: Type 1 runs on hardware; Type 2 runs on an operating system.
◍ What is the main characteristic of symmetric encryption?.
Answer: It uses one shared key for both encryption and decryption.
◍ An attacker was able to perform a denial of service attack on the email
server and now users are unable to retrieve their emails. Which category of
the CIA triad was
compromised?ConfidentialityAvailabilityIntegrityAuthorization.
Answer: Availability
◍ What device broadcasts data to all ports and causes collisions?.
Answer: Hub (Layer 1)
◍ What device uses MAC addresses to forward frames to the correct device?.
Answer: Switch (Layer 2)
◍ A user that does not want to be identified while communicating on a
network uses an application to alter the computer's identity. Which type of
exploit is being perpetrated?a. Denial-of-serviceb. ARP poisoningc. Smurf
attackd. Spoofing.
Answer: Spoofing
◍ Which device regenerates signals to extend distance?.
, Answer: Repeater (Layer 1)
◍ If you are using an unsecure network and need to login to data you would
like keep secure during transmission what should you do?Turn on Windows
FirewallRemove all USB drives, update the system using the latest security
updatesOnly access data when you are physically on siteDeploy a VPN
(Virtual Private Network) and use a secure tunneling protocol.
Answer: Deploy a VPN (Virtual Private Network) and use a secure
tunneling protocol
◍ An organization's IT department is concerned that malicious insiders may be
using elevated access rights. Which security control can be used to draw
attacks away from critical systems?a. Firewallsb. Honeypotsc. IDSd. IPS.
Answer: b. Honeypots
◍ What does the term 'malware' encompass?.
Answer: Virus, Worm, Trojan, Ransomware.
◍ What is an example of a passive attack?.
Answer: Monitoring network traffic without altering it.
◍ Choose the best option that represents IaaS, PaaS and Saa
S. a. IaaS is the networks servers, storage and underlying virtual
infrastructure sold as a service, PaaS is the platform where the operating
system level applications can be run, applications can be developed,
databases can be hosted without having to manage the underlying
infrastructure, SaaS is the end product or application where the client uses
the application but is not responsible for the development, maintenance or
hosting of an application.b. SaaS is the networks servers, storage and
underlying virtual infrastructure sold as a service, IaaS is the platform where
the operating system level applications can be run, applications can be
developed, databases can be hosted without having to manage the
underlying infrastructure, PaaS is the end product or application where the
client uses the application but is not responsible for the development,
maintenance or hosting of an application.c. IaaS is the networks servers,
storage and underlying virtual infrastructure sold as a service, SaaS is the
QUESTIONS WITH ANSWERS GRADED A+
◍ Which statement is true when comparing AES encryption to Triple DES
(3DES)?a. AES requires less CPU utilization and uses a larger block size
than 3DE
S. b. 3DES requires less CPU utilization and uses a larger block size than
AE
S. c. 3DES is a superior encryption protocol due to the triple nature.d. AES
was designed to run on high-end hardware, ensuring speedy throughput..
Answer: a. AES requires less CPU utilization and uses a larger block size
than 3DES.
◍ In the OSI model, what is the primary function of the Network layer?Allows
applications to establish, use, and end a connectionRoutes data between
networksTransmits data framesEnsures that packets are delivered with no
loss or duplication.
Answer: Routes data between networks
◍ What device routes packets between networks using IP addresses?.
Answer: Router (Layer 3)
◍ Diana is investigating suspicious software installed on a machine and would
like to identify any network connections made by that machine. Which one
of the following tools can best assist her with this task by running it on the
target machine?netstatSnortnetcatnmap.
Answer: netstat
◍ A malicious user was able to perform a password brute force attack on a
human resource email account and is now reading through all their emails.
Which category of the CIA triad was
compromised?AuthenticationConfidentialityAvailabilityIntegrity.
, Answer: Confidentiality
◍ What does the CIA Triad stand for?.
Answer: Confidentiality, Integrity, Availability
◍ What type of attack is a DoS or DDoS?.
Answer: Denial of Service attack that overloads a system.
◍ What is the function of an Application Firewall?.
Answer: To perform deep inspection of traffic at the application layer.
◍ What are the three components of AAA in security?.
Answer: Authentication, Authorization, Accounting
◍ What is the primary function of a firewall?.
Answer: Filters traffic based on security rules (Layer 3-7)
◍ For data that is at rest, what is the best method to protect the
data?FirewallEncryptionBackup data on the serverPlace locks on all server
racks and cabinets, enforce AAA for all assets and deploy a firewall.
Answer: Encryption
◍ What is the purpose of network segmentation?.
Answer: To improve security and performance by dividing a network into
smaller parts.
◍ A switch forwards data only to the port that are connected to the destination
device. It knows which port to forward it to based on which value?*Conf
valueIP addressPort NumberMAC Address.
Answer: MAC Address
◍ What does WEP stand for and why is it considered weak?.
Answer: Wired Equivalent Privacy; it is deprecated due to security
vulnerabilities.
◍ What command tests connectivity using ICMP?.
Answer: Ping
◍ A network admin is configuring an application and needs to be sure that port
, 4432 is open what tool should the admin
use?PingnetstatnmapTCP_Function.
Answer: nmap (Network Mapper)It is an open-source Linux command-line
tool that is used to scan IP addresses and ports in a network and to detect
installed applications.
◍ What is the difference between a Red Team and a Blue Team?.
Answer: Red Team conducts offensive testing; Blue Team focuses on
defense.
◍ What is the most common network topology?.
Answer: Star topology
◍ What is the primary difference between a Type 1 and Type 2 hypervisor?.
Answer: Type 1 runs on hardware; Type 2 runs on an operating system.
◍ What is the main characteristic of symmetric encryption?.
Answer: It uses one shared key for both encryption and decryption.
◍ An attacker was able to perform a denial of service attack on the email
server and now users are unable to retrieve their emails. Which category of
the CIA triad was
compromised?ConfidentialityAvailabilityIntegrityAuthorization.
Answer: Availability
◍ What device broadcasts data to all ports and causes collisions?.
Answer: Hub (Layer 1)
◍ What device uses MAC addresses to forward frames to the correct device?.
Answer: Switch (Layer 2)
◍ A user that does not want to be identified while communicating on a
network uses an application to alter the computer's identity. Which type of
exploit is being perpetrated?a. Denial-of-serviceb. ARP poisoningc. Smurf
attackd. Spoofing.
Answer: Spoofing
◍ Which device regenerates signals to extend distance?.
, Answer: Repeater (Layer 1)
◍ If you are using an unsecure network and need to login to data you would
like keep secure during transmission what should you do?Turn on Windows
FirewallRemove all USB drives, update the system using the latest security
updatesOnly access data when you are physically on siteDeploy a VPN
(Virtual Private Network) and use a secure tunneling protocol.
Answer: Deploy a VPN (Virtual Private Network) and use a secure
tunneling protocol
◍ An organization's IT department is concerned that malicious insiders may be
using elevated access rights. Which security control can be used to draw
attacks away from critical systems?a. Firewallsb. Honeypotsc. IDSd. IPS.
Answer: b. Honeypots
◍ What does the term 'malware' encompass?.
Answer: Virus, Worm, Trojan, Ransomware.
◍ What is an example of a passive attack?.
Answer: Monitoring network traffic without altering it.
◍ Choose the best option that represents IaaS, PaaS and Saa
S. a. IaaS is the networks servers, storage and underlying virtual
infrastructure sold as a service, PaaS is the platform where the operating
system level applications can be run, applications can be developed,
databases can be hosted without having to manage the underlying
infrastructure, SaaS is the end product or application where the client uses
the application but is not responsible for the development, maintenance or
hosting of an application.b. SaaS is the networks servers, storage and
underlying virtual infrastructure sold as a service, IaaS is the platform where
the operating system level applications can be run, applications can be
developed, databases can be hosted without having to manage the
underlying infrastructure, PaaS is the end product or application where the
client uses the application but is not responsible for the development,
maintenance or hosting of an application.c. IaaS is the networks servers,
storage and underlying virtual infrastructure sold as a service, SaaS is the
