WGU C480 NETWORKS 2026 – EXAM-STYLE QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED
PASS | 2026/27 LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
1. A network administrator is configuring a new switch and needs to secure the
management interface. Which of the following represents the most secure and
best practice approach for remote access?
A. Configuring SSH version 1 with a complex password and an ACL restricting
access to the management VLAN.
B. Enabling Telnet with a strong password and placing the management interface
on a separate, isolated network segment.
C. Configuring SSH version 2 with key-based authentication, an ACL limiting
access to specific management workstations, and local AAA authentication as a
fallback.
D. Using SNMPv2c with a community string of "private" for read-write access to
the management interface.
Correct Answer: C. Configuring SSH version 2 with key-based authentication,
an ACL limiting access to specific management workstations, and local AAA
authentication as a fallback.
Rationale: This option provides a multi-layered approach to security, which is the
core principle of best practices. SSHv2 is a secure protocol that encrypts all traffic,
including authentication credentials, unlike Telnet or SSHv1 which have known
vulnerabilities. Key-based authentication is significantly more secure than
passwords, as it is not susceptible to brute-force or dictionary attacks in the same
,way. An access control list (ACL) further restricts who can even attempt to connect
to the interface, reducing the attack surface. Local AAA authentication provides a
fallback method if the primary authentication server (like RADIUS or TACACS+) is
unavailable. Option A is incorrect because SSHv1 is deprecated and insecure.
Option B is incorrect because Telnet transmits credentials in plaintext. Option D is
incorrect because SNMPv2c uses community strings sent in clear text and "private"
is a default, well-known string that should never be used in a production
environment.
2. Which OSI model layer is primarily responsible for ensuring that data is
formatted and presented in a way that the application layer can understand,
including data encryption and compression?
A. Session Layer
B. Transport Layer
C. Presentation Layer
D. Data Link Layer
Correct Answer: C. Presentation Layer
Rationale: The Presentation Layer (Layer 6) is the "translator" of the network. It
handles data formatting, encryption, and compression, ensuring that data from the
application layer of one system can be read by the application layer of another. The
Session Layer (Layer 5) establishes, manages, and terminates sessions between
applications. The Transport Layer (Layer 4) provides end-to-end communication
and data flow control. The Data Link Layer (Layer 2) is responsible for node-to-node
data transfer and error correction at the physical layer. Therefore, the presentation
layer is the correct answer.
,3. A company is planning to deploy a new Voice over IP (VoIP) system and
needs to ensure it functions correctly with the existing network infrastructure.
Which protocol is essential for prioritizing VoIP traffic over standard data traffic
to guarantee call quality?
A. SNMP (Simple Network Management Protocol)
B. QoS (Quality of Service)
C. STP (Spanning Tree Protocol)
D. DNS (Domain Name System)
Correct Answer: B. QoS (Quality of Service)
Rationale: QoS is the set of technologies and mechanisms used to manage network
resources and prioritize certain types of traffic. For VoIP, which is sensitive to latency
and jitter, QoS is essential to guarantee bandwidth and reduce delay, ensuring high
call quality. SNMP is for network management and monitoring. STP is a layer 2
protocol used to prevent loops in a network with redundant links. DNS resolves
hostnames to IP addresses. Therefore, QoS is the correct choice for traffic
prioritization.
4. A network technician is troubleshooting a user's inability to access the
company's internal web server by its hostname (e.g., intranet.company.com ).
The user can successfully ping the web server's IP address. At which layer of the
OSI model is the issue most likely occurring?
A. Network Layer
B. Data Link Layer
, C. Application Layer
D. Session Layer
Correct Answer: C. Application Layer
Rationale: The ability to ping by IP address indicates that connectivity exists at the
Network Layer (Layer 3) and below. The failure to resolve a hostname points to an
issue with the DNS service, which operates at the Application Layer (Layer 7). The
client is unable to translate the human-readable name into an IP address. The Data
Link Layer (Layer 2) handles local network addressing and framing, which is
confirmed as working by the successful ping. The Session Layer (Layer 5) is
responsible for establishing and managing sessions, which is not directly related to
name resolution.
5. Which of the following IPv6 addresses is the compressed representation of
the full IPv6 address 2001:0db8:0000:0000:0000:8a2e:0370:7334 ?
A. 2001:db8::8a2e:370:7334
B. 2001:db8::8a2e:370:7334
C. 2001:db8::8a2e:370:7334
D. 2001:db8:0:0:0:8a2e:370:7334
Correct Answer: B. 2001:db8::8a2e:370:7334
Rationale: IPv6 address compression involves two rules. First, leading zeros in each
hexadecimal group can be omitted. Second, one or more consecutive groups of all
zeros can be replaced with a double colon (::). Applying this to
2001:0db8:0000:0000:0000:8a2e:0370:7334 : The leading zeros are removed (
VERIFIED AND WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED
PASS | 2026/27 LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
1. A network administrator is configuring a new switch and needs to secure the
management interface. Which of the following represents the most secure and
best practice approach for remote access?
A. Configuring SSH version 1 with a complex password and an ACL restricting
access to the management VLAN.
B. Enabling Telnet with a strong password and placing the management interface
on a separate, isolated network segment.
C. Configuring SSH version 2 with key-based authentication, an ACL limiting
access to specific management workstations, and local AAA authentication as a
fallback.
D. Using SNMPv2c with a community string of "private" for read-write access to
the management interface.
Correct Answer: C. Configuring SSH version 2 with key-based authentication,
an ACL limiting access to specific management workstations, and local AAA
authentication as a fallback.
Rationale: This option provides a multi-layered approach to security, which is the
core principle of best practices. SSHv2 is a secure protocol that encrypts all traffic,
including authentication credentials, unlike Telnet or SSHv1 which have known
vulnerabilities. Key-based authentication is significantly more secure than
passwords, as it is not susceptible to brute-force or dictionary attacks in the same
,way. An access control list (ACL) further restricts who can even attempt to connect
to the interface, reducing the attack surface. Local AAA authentication provides a
fallback method if the primary authentication server (like RADIUS or TACACS+) is
unavailable. Option A is incorrect because SSHv1 is deprecated and insecure.
Option B is incorrect because Telnet transmits credentials in plaintext. Option D is
incorrect because SNMPv2c uses community strings sent in clear text and "private"
is a default, well-known string that should never be used in a production
environment.
2. Which OSI model layer is primarily responsible for ensuring that data is
formatted and presented in a way that the application layer can understand,
including data encryption and compression?
A. Session Layer
B. Transport Layer
C. Presentation Layer
D. Data Link Layer
Correct Answer: C. Presentation Layer
Rationale: The Presentation Layer (Layer 6) is the "translator" of the network. It
handles data formatting, encryption, and compression, ensuring that data from the
application layer of one system can be read by the application layer of another. The
Session Layer (Layer 5) establishes, manages, and terminates sessions between
applications. The Transport Layer (Layer 4) provides end-to-end communication
and data flow control. The Data Link Layer (Layer 2) is responsible for node-to-node
data transfer and error correction at the physical layer. Therefore, the presentation
layer is the correct answer.
,3. A company is planning to deploy a new Voice over IP (VoIP) system and
needs to ensure it functions correctly with the existing network infrastructure.
Which protocol is essential for prioritizing VoIP traffic over standard data traffic
to guarantee call quality?
A. SNMP (Simple Network Management Protocol)
B. QoS (Quality of Service)
C. STP (Spanning Tree Protocol)
D. DNS (Domain Name System)
Correct Answer: B. QoS (Quality of Service)
Rationale: QoS is the set of technologies and mechanisms used to manage network
resources and prioritize certain types of traffic. For VoIP, which is sensitive to latency
and jitter, QoS is essential to guarantee bandwidth and reduce delay, ensuring high
call quality. SNMP is for network management and monitoring. STP is a layer 2
protocol used to prevent loops in a network with redundant links. DNS resolves
hostnames to IP addresses. Therefore, QoS is the correct choice for traffic
prioritization.
4. A network technician is troubleshooting a user's inability to access the
company's internal web server by its hostname (e.g., intranet.company.com ).
The user can successfully ping the web server's IP address. At which layer of the
OSI model is the issue most likely occurring?
A. Network Layer
B. Data Link Layer
, C. Application Layer
D. Session Layer
Correct Answer: C. Application Layer
Rationale: The ability to ping by IP address indicates that connectivity exists at the
Network Layer (Layer 3) and below. The failure to resolve a hostname points to an
issue with the DNS service, which operates at the Application Layer (Layer 7). The
client is unable to translate the human-readable name into an IP address. The Data
Link Layer (Layer 2) handles local network addressing and framing, which is
confirmed as working by the successful ping. The Session Layer (Layer 5) is
responsible for establishing and managing sessions, which is not directly related to
name resolution.
5. Which of the following IPv6 addresses is the compressed representation of
the full IPv6 address 2001:0db8:0000:0000:0000:8a2e:0370:7334 ?
A. 2001:db8::8a2e:370:7334
B. 2001:db8::8a2e:370:7334
C. 2001:db8::8a2e:370:7334
D. 2001:db8:0:0:0:8a2e:370:7334
Correct Answer: B. 2001:db8::8a2e:370:7334
Rationale: IPv6 address compression involves two rules. First, leading zeros in each
hexadecimal group can be omitted. Second, one or more consecutive groups of all
zeros can be replaced with a double colon (::). Applying this to
2001:0db8:0000:0000:0000:8a2e:0370:7334 : The leading zeros are removed (
