WGU D415 Software-Defined Networking Exam
2026-2027 • 75 Questions • 100% VERIFIED
Introduction
This assessment serves as a definitive examination evaluation resource for candidates preparing
for the WGU D415 Software-Defined Networking Exam (2026-2027) Comprehensive Assessment.
Designed to evaluate advanced networking mastery and software-driven architectural concepts,
this question bank rigorously addresses key content domains mapped to the official Western
Governors University (WGU) blueprint. Key domains evaluated include Software-Defined
Networking (SDN) Architecture, Control and Data Planes, OpenFlow Protocol, Network Function
Virtualization (NFV), SDN Controllers, SDN Security, and Cloud Networking Integration. Mastery of
these software-defined principles is essential for academic progression, achieving professional
software engineering certification, and executing modern cloud network engineering operations.
Question 1: In a standard three-tier Software-Defined Networking (SDN) architecture, which layer
is responsible for defining network logic, computing optimal paths, and enforcing global network
policies?
A) Control Plane Layer.
B) Infrastructure/Data Plane Layer.
C) Application Layer.
D) Physical Management Layer.
Correct Answer: A) Control Plane Layer.
Rationale: The Control Plane Layer contains the SDN controller, which acts as the centralized
brain of the network. It manages network state, computes routing paths, and maintains policy
logic, decoupling control from physical forwarding hardware.
Question 2: What is a primary operational limitation of traditional legacy networking that
Software-Defined Networking (SDN) directly overcomes?
A) Inability to use fiber optic physical connections.
B) Tight coupling of control and data planes on individual autonomous switches.
C) Lack of support for IP routing protocols like BGP.
D) Inability to transmit Ethernet frames across local area networks.
Correct Answer: B) Tight coupling of control and data planes on individual autonomous
switches.
Rationale: In traditional legacy networking, each switch or router independently computes
routing decisions and forwards traffic because the control and data planes are tightly coupled
on every physical device. SDN decouples these planes, centralizing control logic.
,Question 3: Which interface or API type enables communication between the SDN controller and
business applications or orchestration software running at the Application Layer?
A) Southbound API.
B) Eastbound API.
C) Northbound API.
D) Westbound API.
Correct Answer: C) Northbound API.
Rationale: Northbound APIs (typically RESTful APIs using HTTP/JSON) connect the SDN
controller to higher-level applications, management platforms, and network orchestration
tools.
Question 4: In an OpenFlow-enabled switch, what fundamental structure is used by the data plane
to process incoming packets based on match criteria and execute corresponding actions?
A) Border Gateway Protocol routing table.
B) Spanning Tree Protocol database.
C) Domain Name System cache table.
D) Flow Table.
Correct Answer: D) Flow Table.
Rationale: OpenFlow switches forward packets using Flow Tables. Each Flow Table entry
consists of match fields (header values), counters, and instructions/actions (e.g., forward out
port, drop, rewrite header).
Question 5: When a network switch receives an incoming packet that does not match any existing
flow entry in its Flow Table, what type of OpenFlow message is generated and sent to the
controller?
A) Packet-In message.
B) Packet-Out message.
C) Flow-Mod message.
D) Echo-Request message.
Correct Answer: A) Packet-In message.
Rationale: Under reactive flow provisioning, when an incoming packet matches no flow entries
(a table miss), the switch encapsulates the packet header and sends an asynchronous Packet-In
message to the controller requesting forwarding instructions.
Question 6: Which flow entry installation strategy pre-populates flow rules into switch Flow
Tables before traffic arrives, minimizing latency and eliminating controller packet lookup
overhead?
A) Reactive flow provisioning.
B) Proactive flow provisioning.
C) Dynamic flow provisioning.
, D) On-demand flow provisioning.
Correct Answer: B) Proactive flow provisioning.
Rationale: Proactive flow provisioning installs flow entries into switch Flow Tables in advance,
before packets arrive. This avoids Packet-In delays to the controller and guarantees immediate
hardware-rate forwarding.
Question 7: In an OpenFlow switch flow entry, what parameter determines how long a flow rule
remains active in the Flow Table when no matching packets are processed?
A) Hard timeout.
B) Time-To-Live (TTL).
C) Idle timeout.
D) Hold-down timer.
Correct Answer: C) Idle timeout.
Rationale: Idle timeout specifies the duration (in seconds) that a flow entry can remain in the
switch Flow Table without matching any packets. If no packets match during this window, the
entry is evicted.
Question 8: Which OpenFlow message type is sent by an SDN controller to an OpenFlow switch to
add, modify, or delete flow rules in its Flow Tables?
A) Feature-Request.
B) Port-Status.
C) Packet-Out.
D) Flow-Mod (Flow Modification).
Correct Answer: D) Flow-Mod (Flow Modification).
Rationale: Flow-Mod (Flow Modification) messages are Controller-to-Switch messages used by
the controller to programmatically add, update, or delete flow entries in a switch's Flow Table.
Question 9: What specific header field in a Virtual Extensible LAN (VXLAN) packet structure allows
up to 16 million isolated virtual overlay networks to exist simultaneously?
A) 24-bit VXLAN Network Identifier (VNI).
B) 12-bit VLAN ID tag.
C) 16-bit UDP source port.
D) 32-bit IP security SPI.
Correct Answer: A) 24-bit VXLAN Network Identifier (VNI).
Rationale: VXLAN uses a 24-bit VXLAN Network Identifier (VNI) field, expanding maximum
isolated tenant segments from 4,096 (in traditional 802.1Q VLANs) to over 16 million (2^24 =
16,777,216).
2026-2027 • 75 Questions • 100% VERIFIED
Introduction
This assessment serves as a definitive examination evaluation resource for candidates preparing
for the WGU D415 Software-Defined Networking Exam (2026-2027) Comprehensive Assessment.
Designed to evaluate advanced networking mastery and software-driven architectural concepts,
this question bank rigorously addresses key content domains mapped to the official Western
Governors University (WGU) blueprint. Key domains evaluated include Software-Defined
Networking (SDN) Architecture, Control and Data Planes, OpenFlow Protocol, Network Function
Virtualization (NFV), SDN Controllers, SDN Security, and Cloud Networking Integration. Mastery of
these software-defined principles is essential for academic progression, achieving professional
software engineering certification, and executing modern cloud network engineering operations.
Question 1: In a standard three-tier Software-Defined Networking (SDN) architecture, which layer
is responsible for defining network logic, computing optimal paths, and enforcing global network
policies?
A) Control Plane Layer.
B) Infrastructure/Data Plane Layer.
C) Application Layer.
D) Physical Management Layer.
Correct Answer: A) Control Plane Layer.
Rationale: The Control Plane Layer contains the SDN controller, which acts as the centralized
brain of the network. It manages network state, computes routing paths, and maintains policy
logic, decoupling control from physical forwarding hardware.
Question 2: What is a primary operational limitation of traditional legacy networking that
Software-Defined Networking (SDN) directly overcomes?
A) Inability to use fiber optic physical connections.
B) Tight coupling of control and data planes on individual autonomous switches.
C) Lack of support for IP routing protocols like BGP.
D) Inability to transmit Ethernet frames across local area networks.
Correct Answer: B) Tight coupling of control and data planes on individual autonomous
switches.
Rationale: In traditional legacy networking, each switch or router independently computes
routing decisions and forwards traffic because the control and data planes are tightly coupled
on every physical device. SDN decouples these planes, centralizing control logic.
,Question 3: Which interface or API type enables communication between the SDN controller and
business applications or orchestration software running at the Application Layer?
A) Southbound API.
B) Eastbound API.
C) Northbound API.
D) Westbound API.
Correct Answer: C) Northbound API.
Rationale: Northbound APIs (typically RESTful APIs using HTTP/JSON) connect the SDN
controller to higher-level applications, management platforms, and network orchestration
tools.
Question 4: In an OpenFlow-enabled switch, what fundamental structure is used by the data plane
to process incoming packets based on match criteria and execute corresponding actions?
A) Border Gateway Protocol routing table.
B) Spanning Tree Protocol database.
C) Domain Name System cache table.
D) Flow Table.
Correct Answer: D) Flow Table.
Rationale: OpenFlow switches forward packets using Flow Tables. Each Flow Table entry
consists of match fields (header values), counters, and instructions/actions (e.g., forward out
port, drop, rewrite header).
Question 5: When a network switch receives an incoming packet that does not match any existing
flow entry in its Flow Table, what type of OpenFlow message is generated and sent to the
controller?
A) Packet-In message.
B) Packet-Out message.
C) Flow-Mod message.
D) Echo-Request message.
Correct Answer: A) Packet-In message.
Rationale: Under reactive flow provisioning, when an incoming packet matches no flow entries
(a table miss), the switch encapsulates the packet header and sends an asynchronous Packet-In
message to the controller requesting forwarding instructions.
Question 6: Which flow entry installation strategy pre-populates flow rules into switch Flow
Tables before traffic arrives, minimizing latency and eliminating controller packet lookup
overhead?
A) Reactive flow provisioning.
B) Proactive flow provisioning.
C) Dynamic flow provisioning.
, D) On-demand flow provisioning.
Correct Answer: B) Proactive flow provisioning.
Rationale: Proactive flow provisioning installs flow entries into switch Flow Tables in advance,
before packets arrive. This avoids Packet-In delays to the controller and guarantees immediate
hardware-rate forwarding.
Question 7: In an OpenFlow switch flow entry, what parameter determines how long a flow rule
remains active in the Flow Table when no matching packets are processed?
A) Hard timeout.
B) Time-To-Live (TTL).
C) Idle timeout.
D) Hold-down timer.
Correct Answer: C) Idle timeout.
Rationale: Idle timeout specifies the duration (in seconds) that a flow entry can remain in the
switch Flow Table without matching any packets. If no packets match during this window, the
entry is evicted.
Question 8: Which OpenFlow message type is sent by an SDN controller to an OpenFlow switch to
add, modify, or delete flow rules in its Flow Tables?
A) Feature-Request.
B) Port-Status.
C) Packet-Out.
D) Flow-Mod (Flow Modification).
Correct Answer: D) Flow-Mod (Flow Modification).
Rationale: Flow-Mod (Flow Modification) messages are Controller-to-Switch messages used by
the controller to programmatically add, update, or delete flow entries in a switch's Flow Table.
Question 9: What specific header field in a Virtual Extensible LAN (VXLAN) packet structure allows
up to 16 million isolated virtual overlay networks to exist simultaneously?
A) 24-bit VXLAN Network Identifier (VNI).
B) 12-bit VLAN ID tag.
C) 16-bit UDP source port.
D) 32-bit IP security SPI.
Correct Answer: A) 24-bit VXLAN Network Identifier (VNI).
Rationale: VXLAN uses a 24-bit VXLAN Network Identifier (VNI) field, expanding maximum
isolated tenant segments from 4,096 (in traditional 802.1Q VLANs) to over 16 million (2^24 =
16,777,216).
