WGU D415 Objective Assessment Practice Questions 250
Advanced SDN NFV Cloud Orchestration Automation and
Security Compliance
This practice bank contains 250 realistic multiple-choice questions meticulously tailored to
mirror the depth and technical scope of the WGU D415 Objective Assessment. Each scenario
includes four plausible distractors, a bolded correct answer, and an italicized technical
rationale that explains the underlying protocol mechanisms. The material tests advanced
competencies across OpenFlow pipeline logic, ETSI NFV orchestration layers, OpenStack
component integrations, DevOps automation tools, and NIST SP 800-125B security
compliance frameworks.
1. What is the primary function of the control plane in a Software-Defined Network (SDN)?
A. Forwarding traffic to the next destination
B. Encrypting payload data
C. Deciding where traffic should be sent
D. Physically connecting cables to switches
The control plane acts as the "brain" of the network, determining the overall routing paths and making
decisions on how traffic should be handled, whereas the data plane (or forwarding plane) executes
those decisions
.
2. Which component of an SDN architecture separates the control logic from the underlying networking
hardware?
A. Management plane
B. Data plane
C. SDN Controller
D. Access Control List
The SDN Controller is the centralized brain that abstracts the hardware and communicates with both
the network devices below it and the applications above it.
3. Network Functions Virtualization (NFV) primarily aims to replace physical network appliances with:
A. Dedicated hardware firewalls
B. Virtual machines running on standard servers
C. Cloud-based routing protocols
D. Mesh topology nodes [1]
NFV decouples network functions (like routing, firewalling, and load balancing) from proprietary
hardware, allowing them to run as software instances (VNFs) on generic, commercial off-the-shelf
servers.
,4. Which protocol is most commonly used by an SDN Controller to communicate with the forwarding
plane of physical or virtual switches?
A. SNMP
B. BGP
C. OpenFlow
D. ICMP
OpenFlow is a foundational API and communications protocol that allows the SDN controller to
directly interact with the forwarding tables of switches and routers.
5. In an SDN architecture, which plane handles the day-to-day configuration, monitoring, and
administration of the network devices?
A. Data plane
B. Control plane
C. Forwarding plane
D. Management plane
The management plane provides the administrative interface—such as a GUI or CLI—for operators to
configure, monitor, and manage the overall network.
6. What is the primary benefit of network programmability in SDN?
A. It increases the physical bandwidth of copper cables
B. It allows network administrators to automate configuration and quickly deploy changes
C. It eliminates the need for cybersecurity firewalls
D. It ensures all data packets are encrypted by default
Network programmability abstracts the underlying hardware, empowering administrators to use APIs
and scripts to automate tasks and provision network services rapidly. [1]
7. Which of the following is an example of an open-source SDN controller?
A. Cisco Catalyst
B. OpenDaylight
C. Juniper Junos
D. FortiGate
OpenDaylight (ODL) is a widely recognized, modular, open-source SDN controller framework
supported by the Linux Foundation.
8. Which plane in the SDN architecture is responsible for the actual delivery of data packets?
A. Control plane
B. Data plane
C. Management plane
D. Application plane
Also known as the forwarding plane, the data plane is the physical or virtual infrastructure that moves
traffic from one port to another based on rules defined by the control plane.
9. What does the acronym VNF stand for in the context of NFV?
A. Virtual Network Fabric
B. Virtual Network Function
C. Validated Network Framework
D. Virtual Node Forwarding
VNFs are the software implementations of physical network appliances (like a virtual firewall or virtual
router) that operate in an NFV environment. [1]
10. Which of the following accurately describes the "Northbound API" in an SDN architecture?
A. The interface between the controller and the physical switches
B. The interface between the controller and network applications/services
, C. The protocol used between two different SDN controllers
D. The physical connection between network nodes
Northbound APIs allow network administrators and applications to communicate their requirements to
the SDN controller, making the network respond to business logic.
11. Which of the following accurately describes the "Southbound API" in an SDN architecture?
A. The interface between the controller and the physical/virtual network devices
B. The interface between the controller and network management applications
C. The communication channel between two different controllers
D. The protocol used for user authentication
Southbound APIs (like OpenFlow) carry instructions from the centralized controller down to the
switches and routers.
12. What is an overlay network in SDN?
A. A physical wiring configuration spanning multiple floors
B. A virtual network built on top of an underlying physical network infrastructure
C. A type of network cable that reduces latency
D. A legacy routing protocol used in WANs
An overlay network abstracts the underlying physical topology, allowing isolated virtual networks to be
created and managed dynamically (e.g., using VXLAN).
13. How does SDN assist with disaster recovery and network failover?
A. It prevents power outages at the data center
B. It allows for automated and rapid rerouting of traffic by dynamically updating flow tables
C. It physically repairs severed fiber optic cables
D. It replaces the need for redundant servers
Because SDN allows for centralized, programmable control, the controller can instantly detect a
failure and calculate new paths, dynamically updating switches to reroute traffic. [1]
14. What security vulnerability is uniquely introduced by centralizing the network control plane?
A. Increased difficulty in monitoring traffic
B. The inability to use firewalls
C. A single point of failure and a high-value target for cyber attacks
D. The automatic deletion of access control lists
While centralized control offers efficiency and automation, compromising the single SDN controller
can grant an attacker total visibility and control over the entire network.
15. What is the primary role of NFV-MANO (Management and Orchestration)?
A. Encrypting traffic between user devices
B. Managing and automating the lifecycle of virtual network functions
C. Routing packets based on IP addresses
D. Connecting remote branch offices to the main campus
NFV-MANO is the framework responsible for the management, deployment, scaling, and
configuration of VNFs and the infrastructure they run on.
16. What is network slicing?
A. Dividing a physical switch into smaller physical pieces using a saw
B. Creating multiple logical, isolated networks on a shared physical infrastructure
C. Dropping packets that exceed a specific size limit
D. Segmenting a hard drive to store log files
Network slicing allows service providers to create discrete, tailored virtual networks for different use
cases (e.g., IoT vs. streaming) over a common physical hardware base.
17. Which protocol is primarily used for the management plane in traditional (non-SDN) networks?
A. OSPF
Advanced SDN NFV Cloud Orchestration Automation and
Security Compliance
This practice bank contains 250 realistic multiple-choice questions meticulously tailored to
mirror the depth and technical scope of the WGU D415 Objective Assessment. Each scenario
includes four plausible distractors, a bolded correct answer, and an italicized technical
rationale that explains the underlying protocol mechanisms. The material tests advanced
competencies across OpenFlow pipeline logic, ETSI NFV orchestration layers, OpenStack
component integrations, DevOps automation tools, and NIST SP 800-125B security
compliance frameworks.
1. What is the primary function of the control plane in a Software-Defined Network (SDN)?
A. Forwarding traffic to the next destination
B. Encrypting payload data
C. Deciding where traffic should be sent
D. Physically connecting cables to switches
The control plane acts as the "brain" of the network, determining the overall routing paths and making
decisions on how traffic should be handled, whereas the data plane (or forwarding plane) executes
those decisions
.
2. Which component of an SDN architecture separates the control logic from the underlying networking
hardware?
A. Management plane
B. Data plane
C. SDN Controller
D. Access Control List
The SDN Controller is the centralized brain that abstracts the hardware and communicates with both
the network devices below it and the applications above it.
3. Network Functions Virtualization (NFV) primarily aims to replace physical network appliances with:
A. Dedicated hardware firewalls
B. Virtual machines running on standard servers
C. Cloud-based routing protocols
D. Mesh topology nodes [1]
NFV decouples network functions (like routing, firewalling, and load balancing) from proprietary
hardware, allowing them to run as software instances (VNFs) on generic, commercial off-the-shelf
servers.
,4. Which protocol is most commonly used by an SDN Controller to communicate with the forwarding
plane of physical or virtual switches?
A. SNMP
B. BGP
C. OpenFlow
D. ICMP
OpenFlow is a foundational API and communications protocol that allows the SDN controller to
directly interact with the forwarding tables of switches and routers.
5. In an SDN architecture, which plane handles the day-to-day configuration, monitoring, and
administration of the network devices?
A. Data plane
B. Control plane
C. Forwarding plane
D. Management plane
The management plane provides the administrative interface—such as a GUI or CLI—for operators to
configure, monitor, and manage the overall network.
6. What is the primary benefit of network programmability in SDN?
A. It increases the physical bandwidth of copper cables
B. It allows network administrators to automate configuration and quickly deploy changes
C. It eliminates the need for cybersecurity firewalls
D. It ensures all data packets are encrypted by default
Network programmability abstracts the underlying hardware, empowering administrators to use APIs
and scripts to automate tasks and provision network services rapidly. [1]
7. Which of the following is an example of an open-source SDN controller?
A. Cisco Catalyst
B. OpenDaylight
C. Juniper Junos
D. FortiGate
OpenDaylight (ODL) is a widely recognized, modular, open-source SDN controller framework
supported by the Linux Foundation.
8. Which plane in the SDN architecture is responsible for the actual delivery of data packets?
A. Control plane
B. Data plane
C. Management plane
D. Application plane
Also known as the forwarding plane, the data plane is the physical or virtual infrastructure that moves
traffic from one port to another based on rules defined by the control plane.
9. What does the acronym VNF stand for in the context of NFV?
A. Virtual Network Fabric
B. Virtual Network Function
C. Validated Network Framework
D. Virtual Node Forwarding
VNFs are the software implementations of physical network appliances (like a virtual firewall or virtual
router) that operate in an NFV environment. [1]
10. Which of the following accurately describes the "Northbound API" in an SDN architecture?
A. The interface between the controller and the physical switches
B. The interface between the controller and network applications/services
, C. The protocol used between two different SDN controllers
D. The physical connection between network nodes
Northbound APIs allow network administrators and applications to communicate their requirements to
the SDN controller, making the network respond to business logic.
11. Which of the following accurately describes the "Southbound API" in an SDN architecture?
A. The interface between the controller and the physical/virtual network devices
B. The interface between the controller and network management applications
C. The communication channel between two different controllers
D. The protocol used for user authentication
Southbound APIs (like OpenFlow) carry instructions from the centralized controller down to the
switches and routers.
12. What is an overlay network in SDN?
A. A physical wiring configuration spanning multiple floors
B. A virtual network built on top of an underlying physical network infrastructure
C. A type of network cable that reduces latency
D. A legacy routing protocol used in WANs
An overlay network abstracts the underlying physical topology, allowing isolated virtual networks to be
created and managed dynamically (e.g., using VXLAN).
13. How does SDN assist with disaster recovery and network failover?
A. It prevents power outages at the data center
B. It allows for automated and rapid rerouting of traffic by dynamically updating flow tables
C. It physically repairs severed fiber optic cables
D. It replaces the need for redundant servers
Because SDN allows for centralized, programmable control, the controller can instantly detect a
failure and calculate new paths, dynamically updating switches to reroute traffic. [1]
14. What security vulnerability is uniquely introduced by centralizing the network control plane?
A. Increased difficulty in monitoring traffic
B. The inability to use firewalls
C. A single point of failure and a high-value target for cyber attacks
D. The automatic deletion of access control lists
While centralized control offers efficiency and automation, compromising the single SDN controller
can grant an attacker total visibility and control over the entire network.
15. What is the primary role of NFV-MANO (Management and Orchestration)?
A. Encrypting traffic between user devices
B. Managing and automating the lifecycle of virtual network functions
C. Routing packets based on IP addresses
D. Connecting remote branch offices to the main campus
NFV-MANO is the framework responsible for the management, deployment, scaling, and
configuration of VNFs and the infrastructure they run on.
16. What is network slicing?
A. Dividing a physical switch into smaller physical pieces using a saw
B. Creating multiple logical, isolated networks on a shared physical infrastructure
C. Dropping packets that exceed a specific size limit
D. Segmenting a hard drive to store log files
Network slicing allows service providers to create discrete, tailored virtual networks for different use
cases (e.g., IoT vs. streaming) over a common physical hardware base.
17. Which protocol is primarily used for the management plane in traditional (non-SDN) networks?
A. OSPF
