WGU E027 TASK 1 TECHNICAL
PROPOSAL | VIRTUALIZATION &
IAAS AZURE CLOUD MIGRATION,
LATEST MOCK PRACTICE SET
130 Questions with Answers and Detailed Rationales
100 PERCENT GUARANTEED PASS
INSTANT DOWNLOAD ANSWERS INCLUDED
IMPORTANCE OF THIS DOCUMENT
This comprehensive examination preparation guide has been meticulously developed to help you succeed in the
WGU E027 TASK 1 TECHNICAL PROPOSAL | VIRTUALIZATION & IAAS AZURE CLOUD MIGRATION,
HYPER-V ARCHITECTURE & PCI DSS | 2026 PASSED.. It contains 130 carefully selected questions that reflect
the most current exam content and testing strategies. Each question is accompanied by a correct answer and a
detailed rationale that explains the underlying pathophysiology, pharmacology, or clinical reasoning.
Self-Assessment – Test your knowledge and Exam Preparation – Familiarize yourself with the
identify areas requiring further question format and content
study areas
Concept Reinforcement – Deepen your Confidence Building – Develop test-taking
understanding through strategies and reduce
evidence-based exam anxiety
rationales
Time Management – Practice answering
questions under simulated
exam conditions
Review Summary 130 Questions
Foundations - Application - WGU E027 TASK 1 Technical Proposal Virtualization & IAAS Azure Cloud
Migration Hyper-v Architecture & PCI DSS 2026 Passed Cloud Architecture Virtualization AND Compliance
Graduate
All answers with rationales
,Table of Contents
Content Area Questions Key Topics
Cloud Migration Planning 1-22 Azure, Hyper-v, Migration, Network, Ensure
AND Strategy
Azure Infrastructure AS A 23-44 Azure, Hyper-v, Ensure, Network, Migration
Service IAAS Design
Hyper-v Virtualization 45-66 Azure, Hyper-v, Application, PCI DSS, Ensure
Architecture
HIGH Availability AND 67-88 Azure, Migration, Hyper-v, Ensure, Environment
Disaster Recovery
Network Security AND 89-110 Azure, Hyper-v, Virtual, Ensure, Migration
Segmentation
Identity AND Access 111-130 Azure, Hyper-v, PCI DSS, Recovery, Network
Management IAM
TOTAL 130 All questions include answers and detailed rationales
,Section A - Cloud Migration Planning AND Strategy
Q1.
During a lift-and-shift migration of a PCI DSS compliant workload to Azure IaaS, the
security team insists on maintaining network-level isolation for cardholder data. Which
Azure architecture ensures that the virtual network is logically isolated from all other
networks while still allowing outbound Internet access for patching?
A. Deploy the workload in a peered VNet B. Use a single VNet with a subnet
with a network virtual appliance (NVA) for all dedicated to cardholder data and a network
traffic. security group (NSG) that denies all inbound
traffic.
C. Create a separate VNet with a forced D. Place the workload in a VPN-connected
tunneling route to a firewall for all outbound on-premises network and use Azure as a
traffic. backup.
Correct: C - Create a separate VNet with a forced tunneling route to a firewall for all
outbound traffic.
Rationale:A separate VNet provides logical isolation. Forced tunneling to a firewall ensures
all outbound traffic is inspected, meeting PCI DSS requirement 1.3.2. Peered VNets are not
isolated; NSGs alone do not provide full isolation; VPN-connected on-premises does not
leverage Azure IaaS.
Q2.
A Hyper-V host runs multiple VMs that must be migrated to Azure. The migration must
minimize downtime and ensure that the VMs are replicated continuously before cutover.
Which Azure service should be used, and why?
A. Azure Migrate with agent-based B. Azure Site Recovery, because it provides
replication, because it supports continuous continuous replication and orchestrated
replication for Hyper-V VMs. failover for Hyper-V VMs.
C. Azure Backup, because it provides D. Azure Import/Export, because it transfers
image-level backups that can be restored in VHDs offline without network dependency.
Azure.
Correct: B - Azure Site Recovery, because it provides continuous replication and
orchestrated failover for Hyper-V VMs.
Rationale:Azure Site Recovery (ASR) is designed for disaster recovery and migration,
offering continuous replication and controlled failover, minimizing downtime. Azure Migrate
with agent-based replication is for VMware or physical servers, not Hyper-V. Azure Backup is
for backup, not continuous replication. Import/Export is offline and not continuous.
Page 3
, Section A - Cloud Migration Planning AND Strategy
Q3.
A financial institution plans to migrate a legacy application to Azure IaaS. The application
has unpredictable usage peaks, and the CFO requires cost predictability. Which Azure VM
pricing model best balances cost and performance for this variable workload?
A. Pay-as-you-go with autoscaling to handle B. Reserved Instances for 3 years to lock in
peaks. low rates.
C. Azure Spot VMs to take advantage of D. Dedicated hosts to ensure physical
unused capacity. isolation.
Correct: A - Pay-as-you-go with autoscaling to handle peaks.
Rationale:Pay-as-you-go with autoscaling provides flexibility for unpredictable peaks while
ensuring you only pay for what you use, offering cost predictability through scaling policies.
Reserved Instances are for predictable, steady-state workloads. Spot VMs are not reliable for
critical workloads. Dedicated hosts are costly and not needed for cost predictability.
Q4.
In a Hyper-V environment, a VM experiences intermittent connectivity failures. You
discover the virtual switch is a standard switch. Which change would most likely improve
network reliability and performance?
A. Move to an external virtual switch with a B. Implement a virtual switch with teamed
single physical NIC. NICs using SET (Switch Embedded
Teaming).
C. Use an internal virtual switch and route D. Disable the virtual switch and use a
traffic via the host OS. legacy network adapter.
Correct: B - Implement a virtual switch with teamed NICs using SET (Switch Embedded
Teaming).
Rationale:SET (Switch Embedded Teaming) allows multiple physical NICs to be bound to a
virtual switch, providing load balancing and failover, improving reliability and performance. An
external switch with a single NIC is a single point of failure. Internal switches do not provide
external connectivity. Legacy adapters are outdated and less reliable.
Q5.
A retail company processing credit card transactions is migrating to Azure. The PCI DSS
scope includes the CDE (Cardholder Data Environment). Which Azure service, when used
improperly, could inadvertently expand the PCI DSS scope?
A. Using Azure SQL Database with B. Placing a management jump box in the
Transparent Data Encryption (TDE). same VNet as the CDE without additional
segmentation.
Page 4
PROPOSAL | VIRTUALIZATION &
IAAS AZURE CLOUD MIGRATION,
LATEST MOCK PRACTICE SET
130 Questions with Answers and Detailed Rationales
100 PERCENT GUARANTEED PASS
INSTANT DOWNLOAD ANSWERS INCLUDED
IMPORTANCE OF THIS DOCUMENT
This comprehensive examination preparation guide has been meticulously developed to help you succeed in the
WGU E027 TASK 1 TECHNICAL PROPOSAL | VIRTUALIZATION & IAAS AZURE CLOUD MIGRATION,
HYPER-V ARCHITECTURE & PCI DSS | 2026 PASSED.. It contains 130 carefully selected questions that reflect
the most current exam content and testing strategies. Each question is accompanied by a correct answer and a
detailed rationale that explains the underlying pathophysiology, pharmacology, or clinical reasoning.
Self-Assessment – Test your knowledge and Exam Preparation – Familiarize yourself with the
identify areas requiring further question format and content
study areas
Concept Reinforcement – Deepen your Confidence Building – Develop test-taking
understanding through strategies and reduce
evidence-based exam anxiety
rationales
Time Management – Practice answering
questions under simulated
exam conditions
Review Summary 130 Questions
Foundations - Application - WGU E027 TASK 1 Technical Proposal Virtualization & IAAS Azure Cloud
Migration Hyper-v Architecture & PCI DSS 2026 Passed Cloud Architecture Virtualization AND Compliance
Graduate
All answers with rationales
,Table of Contents
Content Area Questions Key Topics
Cloud Migration Planning 1-22 Azure, Hyper-v, Migration, Network, Ensure
AND Strategy
Azure Infrastructure AS A 23-44 Azure, Hyper-v, Ensure, Network, Migration
Service IAAS Design
Hyper-v Virtualization 45-66 Azure, Hyper-v, Application, PCI DSS, Ensure
Architecture
HIGH Availability AND 67-88 Azure, Migration, Hyper-v, Ensure, Environment
Disaster Recovery
Network Security AND 89-110 Azure, Hyper-v, Virtual, Ensure, Migration
Segmentation
Identity AND Access 111-130 Azure, Hyper-v, PCI DSS, Recovery, Network
Management IAM
TOTAL 130 All questions include answers and detailed rationales
,Section A - Cloud Migration Planning AND Strategy
Q1.
During a lift-and-shift migration of a PCI DSS compliant workload to Azure IaaS, the
security team insists on maintaining network-level isolation for cardholder data. Which
Azure architecture ensures that the virtual network is logically isolated from all other
networks while still allowing outbound Internet access for patching?
A. Deploy the workload in a peered VNet B. Use a single VNet with a subnet
with a network virtual appliance (NVA) for all dedicated to cardholder data and a network
traffic. security group (NSG) that denies all inbound
traffic.
C. Create a separate VNet with a forced D. Place the workload in a VPN-connected
tunneling route to a firewall for all outbound on-premises network and use Azure as a
traffic. backup.
Correct: C - Create a separate VNet with a forced tunneling route to a firewall for all
outbound traffic.
Rationale:A separate VNet provides logical isolation. Forced tunneling to a firewall ensures
all outbound traffic is inspected, meeting PCI DSS requirement 1.3.2. Peered VNets are not
isolated; NSGs alone do not provide full isolation; VPN-connected on-premises does not
leverage Azure IaaS.
Q2.
A Hyper-V host runs multiple VMs that must be migrated to Azure. The migration must
minimize downtime and ensure that the VMs are replicated continuously before cutover.
Which Azure service should be used, and why?
A. Azure Migrate with agent-based B. Azure Site Recovery, because it provides
replication, because it supports continuous continuous replication and orchestrated
replication for Hyper-V VMs. failover for Hyper-V VMs.
C. Azure Backup, because it provides D. Azure Import/Export, because it transfers
image-level backups that can be restored in VHDs offline without network dependency.
Azure.
Correct: B - Azure Site Recovery, because it provides continuous replication and
orchestrated failover for Hyper-V VMs.
Rationale:Azure Site Recovery (ASR) is designed for disaster recovery and migration,
offering continuous replication and controlled failover, minimizing downtime. Azure Migrate
with agent-based replication is for VMware or physical servers, not Hyper-V. Azure Backup is
for backup, not continuous replication. Import/Export is offline and not continuous.
Page 3
, Section A - Cloud Migration Planning AND Strategy
Q3.
A financial institution plans to migrate a legacy application to Azure IaaS. The application
has unpredictable usage peaks, and the CFO requires cost predictability. Which Azure VM
pricing model best balances cost and performance for this variable workload?
A. Pay-as-you-go with autoscaling to handle B. Reserved Instances for 3 years to lock in
peaks. low rates.
C. Azure Spot VMs to take advantage of D. Dedicated hosts to ensure physical
unused capacity. isolation.
Correct: A - Pay-as-you-go with autoscaling to handle peaks.
Rationale:Pay-as-you-go with autoscaling provides flexibility for unpredictable peaks while
ensuring you only pay for what you use, offering cost predictability through scaling policies.
Reserved Instances are for predictable, steady-state workloads. Spot VMs are not reliable for
critical workloads. Dedicated hosts are costly and not needed for cost predictability.
Q4.
In a Hyper-V environment, a VM experiences intermittent connectivity failures. You
discover the virtual switch is a standard switch. Which change would most likely improve
network reliability and performance?
A. Move to an external virtual switch with a B. Implement a virtual switch with teamed
single physical NIC. NICs using SET (Switch Embedded
Teaming).
C. Use an internal virtual switch and route D. Disable the virtual switch and use a
traffic via the host OS. legacy network adapter.
Correct: B - Implement a virtual switch with teamed NICs using SET (Switch Embedded
Teaming).
Rationale:SET (Switch Embedded Teaming) allows multiple physical NICs to be bound to a
virtual switch, providing load balancing and failover, improving reliability and performance. An
external switch with a single NIC is a single point of failure. Internal switches do not provide
external connectivity. Legacy adapters are outdated and less reliable.
Q5.
A retail company processing credit card transactions is migrating to Azure. The PCI DSS
scope includes the CDE (Cardholder Data Environment). Which Azure service, when used
improperly, could inadvertently expand the PCI DSS scope?
A. Using Azure SQL Database with B. Placing a management jump box in the
Transparent Data Encryption (TDE). same VNet as the CDE without additional
segmentation.
Page 4
