WGU Network-and-Security-Foundation Practice Exam Questions & Answers

5 Free Questions · Last reviewed: August 27, 2026 · Prepared & Reviewed by the ValidExamDumps Editorial Team

Exam Facts

WGU Network-and-Security-Foundation Exam Details

Key details for this exam, checked against the published exam outline

62 Practice Questions (Our Bank)
Exam Code
Network-and-Security-Foundation
Full Name
WGU Network Engineering and Security Foundation Exam - D315
Issuing Body
Western Governors University
Question Format (Our Bank)
Multiple Choice
Delivery
Online proctored (Objective Assessment)
Practice Questions

Free Network-and-Security-Foundation Practice Questions

Each question shows the correct answer and an explanation of why it is right

VA
ValidExamDumps Editorial Team Every question and its answer is checked by our Network-and-Security-Foundation exam preparation team, who also write the explanation shown with each one. How we research and review these pages
Question 1

What is the TCP/IP layer that includes the User Datagram Protocol (UDP)?

Correct Answer: D
Explanation

The Transport layer in the TCP/IP model includes the User Datagram Protocol (UDP) and Transmission Control Protocol (TCP). UDP is a connectionless protocol used for fast, lightweight data transmission where reliability is not the priority (e.g., video streaming, VoIP).

Application layer handles end-user services but not transport mechanisms.

Network or internet layer deals with IP addressing and routing, not UDP.

Physical or network access layer concerns hardware transmission methods.

Question 2

A computer network has software that tracks successful and unsuccessful connection attempts to the network in order to better identify attacks.

Which network security concept does this scenario address?

Correct Answer: A
Explanation

Accounting (also known as auditing or logging) is a network security concept that tracks user activities, including successful and failed authentication attempts, system changes, and resource access. This helps in detecting and mitigating security breaches.

Authentication verifies user identity but does not track activity.

Availability ensures systems remain operational.

Authorization controls user permissions but does not log activities.

Question 3

An organization has experienced rogue access points in the past and wants to take actions to mitigate this type of attack.

What should this organization do?

Correct Answer: B
Explanation

Monitor mode scanning allows administrators to detect unauthorized or rogue access points broadcasting in the network. This technique, along with wireless intrusion detection systems (WIDS), helps identify and block unauthorized devices.

Requiring complex passwords enhances security but does not prevent rogue APs.

Server-side validation secures applications, not wireless networks.

Disallowing ICMP packets is a security measure but does not address rogue APs.

Question 4

What is the component of the CIA triad for IT security that requires that IP packets be retransmitted if the receiving host has an invalid checksum value?

Correct Answer: D
Explanation

Integrity in the CIA (Confidentiality, Integrity, Availability) triad ensures that data is not altered in an unauthorized manner. In networking, integrity mechanisms such as checksums, message authentication codes (MACs), and digital signatures verify that transmitted data has not been tampered with. If an IP packet has an invalid checksum, the system detects corruption and requests retransmission, ensuring data integrity.

Confidentiality protects against unauthorized access but does not ensure data consistency.

Availability ensures that resources are accessible but does not verify data correctness.

Consistency is not a formal component of the CIA triad.

Question 5

When setting up a network, a technician needs a router that connects computers together and connects computers to the internet.

Which router should be used?

Correct Answer: C
Explanation

A broadband router is a type of network router that connects multiple computers within a local network while also providing internet access. It functions as a gateway between the local network and the internet by handling data packet transmission and routing. Broadband routers are widely used in small offices and homes because they offer essential networking services, including DHCP, NAT, and sometimes wireless connectivity.

Inter-provider border routers are used by ISPs to route data between different providers and do not serve as an internet gateway for end users.

Subscriber edge routers are typically deployed at the edge of an ISP's network to connect subscriber networks but do not provide full internet routing functionalities.

Core routers operate at the backbone level of a network, facilitating high-speed data transfer but not connecting end-user devices directly.

Get Full Access

62 questions covering all exam domains, starting from $20

Study Guide

What the WGU Network-and-Security-Foundation Exam Covers

3 domains from the WGU Network-and-Security-Foundation exam outline, with approximate weightings. Every sample question above is tagged with the domain it comes from

Domain 1: Identifying Solutions for Compliance with Security Guidance

This section of the exam measures skills of Network Support Technicians and describes how to choose suitable approaches that follow security policies and industry rules. It explains how organizations apply required standards and how basic compliance methods help reduce risks. Learners understand how to determine effective solutions that keep systems secure and properly maintained.

Domain 2: Identifying Basic Network Systems and Concepts Related to Networking Technologies

This section of the exam measures skills of IT Support Specialists and outlines the essential elements of network systems. It introduces how networks operate through devices, connections, and communication processes. Learners receive a simple and clear understanding of the main networking concepts used in current technology settings.

Domain 3: Applying Network Security Concepts for Business Continuity, Data Access, and Confidentiality

This section of the exam measures skills of Network Support Technicians and highlights the core practices used to protect organizational information. It explains how security measures keep operations running, ensure proper access to data, and maintain confidentiality. Learners see how these foundational security concepts contribute to a reliable and well protected network environment.

FAQ

Network-and-Security-Foundation Exam FAQ

Common questions about the exam itself

What background do I need before taking the D315 Network Engineering and Security Foundation Exam?
D315 is an introductory course designed for students starting IT, cybersecurity, or computer science programs, so no prior certifications are required. You should have basic comfort with computers and operating systems before starting, but the course builds from foundational concepts.
How long should I prepare to study for the D315 exam?
Most WGU students spend between 2 to 4 weeks preparing for the D315 Objective Assessment, depending on prior experience. This is a foundational exam covering basic networking and security concepts, so the study timeline is typically shorter than advanced CompTIA certifications.
What format is the D315 Objective Assessment exam?
The D315 OA is a proctored exam delivered online with multiple choice questions testing foundational knowledge of networking concepts like the OSI model, IP addressing, and protocols, along with security fundamentals like the CIA triad and access controls.
What topics give most candidates the most trouble on D315?
Subnetting and IP addressing calculations typically challenge candidates the most, followed by understanding OSI model layers and how different protocols map to each layer. Practice problems and visualizing network topologies help clarify these concepts.
Is D315 a prerequisite for other WGU networking courses?
Yes, D315 Network and Security Foundations is a prerequisite for WGU's Networks course (D325), which prepares you for the CompTIA Network+ certification. D315 must be completed first to move forward in the networking track.
Can I retake the D315 exam if I don't pass on the first attempt?
WGU allows course reassessments, but you need to wait a specified period and may be required to complete additional course material or practice assessments before retaking the Objective Assessment.
What happens after I pass the D315 exam - does the certification expire?
D315 is a course assessment within your WGU degree program rather than a standalone certification, so it does not expire. Once you complete it as part of your degree, the credit remains valid indefinitely.
How does D315 differ from other foundational exams like CompTIA Security+?
D315 covers both basic networking and security concepts at an introductory level, while CompTIA Security+ focuses exclusively on security and assumes networking knowledge. D315 is typically taken first as a prerequisite foundation before moving to Security+ preparation.
Can I use CompTIA Network+ certification to satisfy the D315 requirement instead?
Yes, WGU allows certain CompTIA certifications (Network+, Security+, Pentest+, CySA+) and other vendor certifications to satisfy or test out of the D315 course requirement. Check with your academic counselor about substitution policies for your specific program.
What role in IT does the D315 exam prepare you for?
D315 prepares you for entry-level IT Support Specialist and Network Support Technician roles. It gives you the foundational knowledge needed to understand how networks operate, basic security principles, and compliance concepts used in most IT environments.