WGU D327 – Network and Security
Applications Final Prep Exam (Latest
Update 2026/2027) Questions and
Verified Answers | 100% Correct |
Grade A.
1. Which network security principle ensures that users receive only
the permissions necessary to perform their assigned tasks?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Zero trust
Answer: B. Least privilege
Rationale: The principle of least privilege restricts users, applications,
and systems to only the access rights required for their responsibilities.
This reduces the risk of unauthorized access, accidental changes, and
damage caused by compromised accounts.
2. A network administrator wants to divide a large network into
smaller logical segments to reduce broadcast traffic and improve
security. Which technology should be implemented?
,A. VLANs
B. NAT
C. DHCP
D. DNS
Answer: A. VLANs
Rationale: Virtual Local Area Networks (VLANs) logically separate
devices into different network segments regardless of their physical
location. VLANs improve performance and security by isolating
broadcast domains and limiting unnecessary communication.
3. Which security device monitors network traffic and blocks malicious
activity based on predefined rules?
A. Hub
B. Switch
C. Intrusion Prevention System (IPS)
D. Proxy server
Answer: C. Intrusion Prevention System (IPS)
Rationale: An IPS actively analyzes network traffic and can
automatically block or prevent detected threats. Unlike an Intrusion
Detection System (IDS), which only alerts administrators, an IPS takes
defensive action.
4. Which protocol is commonly used to securely access a remote
command-line interface?
,A. FTP
B. Telnet
C. SSH
D. HTTP
Answer: C. SSH
Rationale: Secure Shell (SSH) provides encrypted remote access to
network devices and servers. Telnet performs similar functions but
transmits data, including credentials, in plaintext.
5. What is the primary purpose of encryption in network security?
A. Increase bandwidth
B. Prevent data from being read by unauthorized users
C. Improve routing efficiency
D. Reduce network latency
Answer: B. Prevent data from being read by unauthorized users
Rationale: Encryption converts readable information into an unreadable
format that requires a cryptographic key for access. Its primary goal is
protecting confidentiality of sensitive information.
6. Which attack involves overwhelming a system with excessive traffic
to make services unavailable?
A. Phishing
B. SQL injection
C. Denial-of-Service (DoS)
D. Privilege escalation
, Answer: C. Denial-of-Service (DoS)
Rationale: A Denial-of-Service attack attempts to exhaust system
resources or network bandwidth, preventing legitimate users from
accessing services. Distributed DoS (DDoS) attacks use multiple
compromised systems to increase impact.
7. Which protocol provides automatic assignment of IP addresses to
network devices?
A. DNS
B. DHCP
C. SMTP
D. SNMP
Answer: B. DHCP
Rationale: Dynamic Host Configuration Protocol (DHCP) automatically
assigns IP addresses and other network configuration information, such
as subnet masks and default gateways, to devices on a network.
8. A company wants employees to securely connect to internal
resources while working remotely. Which solution is most
appropriate?
A. VPN
B. Hub
C. Repeater
D. Bridge
Answer: A. VPN
Applications Final Prep Exam (Latest
Update 2026/2027) Questions and
Verified Answers | 100% Correct |
Grade A.
1. Which network security principle ensures that users receive only
the permissions necessary to perform their assigned tasks?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Zero trust
Answer: B. Least privilege
Rationale: The principle of least privilege restricts users, applications,
and systems to only the access rights required for their responsibilities.
This reduces the risk of unauthorized access, accidental changes, and
damage caused by compromised accounts.
2. A network administrator wants to divide a large network into
smaller logical segments to reduce broadcast traffic and improve
security. Which technology should be implemented?
,A. VLANs
B. NAT
C. DHCP
D. DNS
Answer: A. VLANs
Rationale: Virtual Local Area Networks (VLANs) logically separate
devices into different network segments regardless of their physical
location. VLANs improve performance and security by isolating
broadcast domains and limiting unnecessary communication.
3. Which security device monitors network traffic and blocks malicious
activity based on predefined rules?
A. Hub
B. Switch
C. Intrusion Prevention System (IPS)
D. Proxy server
Answer: C. Intrusion Prevention System (IPS)
Rationale: An IPS actively analyzes network traffic and can
automatically block or prevent detected threats. Unlike an Intrusion
Detection System (IDS), which only alerts administrators, an IPS takes
defensive action.
4. Which protocol is commonly used to securely access a remote
command-line interface?
,A. FTP
B. Telnet
C. SSH
D. HTTP
Answer: C. SSH
Rationale: Secure Shell (SSH) provides encrypted remote access to
network devices and servers. Telnet performs similar functions but
transmits data, including credentials, in plaintext.
5. What is the primary purpose of encryption in network security?
A. Increase bandwidth
B. Prevent data from being read by unauthorized users
C. Improve routing efficiency
D. Reduce network latency
Answer: B. Prevent data from being read by unauthorized users
Rationale: Encryption converts readable information into an unreadable
format that requires a cryptographic key for access. Its primary goal is
protecting confidentiality of sensitive information.
6. Which attack involves overwhelming a system with excessive traffic
to make services unavailable?
A. Phishing
B. SQL injection
C. Denial-of-Service (DoS)
D. Privilege escalation
, Answer: C. Denial-of-Service (DoS)
Rationale: A Denial-of-Service attack attempts to exhaust system
resources or network bandwidth, preventing legitimate users from
accessing services. Distributed DoS (DDoS) attacks use multiple
compromised systems to increase impact.
7. Which protocol provides automatic assignment of IP addresses to
network devices?
A. DNS
B. DHCP
C. SMTP
D. SNMP
Answer: B. DHCP
Rationale: Dynamic Host Configuration Protocol (DHCP) automatically
assigns IP addresses and other network configuration information, such
as subnet masks and default gateways, to devices on a network.
8. A company wants employees to securely connect to internal
resources while working remotely. Which solution is most
appropriate?
A. VPN
B. Hub
C. Repeater
D. Bridge
Answer: A. VPN
