WGU E027 Task 2: Infrastructure Implementation Report - Azure IaaS, Ubuntu VM, Nginx, SSL/TLS, iperf3 & Monitoring | 150 Questions and Answers | 2026 Passed

WGU E027 TASK 2
INFRASTRUCTURE
IMPLEMENTATION REPORT |
LATEST MOCK PRACTICE SET
150 Questions with Answers and Detailed Rationales


100 PERCENT GUARANTEED PASS


INSTANT DOWNLOAD ANSWERS INCLUDED



IMPORTANCE OF THIS DOCUMENT
This comprehensive examination preparation guide has been meticulously developed to help you succeed in the
WGU E027 TASK 2 INFRASTRUCTURE IMPLEMENTATION REPORT | AZURE IAAS, UBUNTU VM, NGINX,
SSL/TLS, IPERF3 & MONITORING | 2026 PASSED.. It contains 150 carefully selected questions that reflect the
most current exam content and testing strategies. Each question is accompanied by a correct answer and a
detailed rationale that explains the underlying pathophysiology, pharmacology, or clinical reasoning.

Self-Assessment – Test your knowledge and Exam Preparation – Familiarize yourself with the
identify areas requiring further question format and content
study areas

Concept Reinforcement – Deepen your Confidence Building – Develop test-taking
understanding through strategies and reduce
evidence-based exam anxiety
rationales
Time Management – Practice answering
questions under simulated
exam conditions




Review Summary 150 Questions


Foundations - Application - WGU E027 TASK 2 Infrastructure Implementation Report Azure IAAS Ubuntu
VM Nginx Ssl/tls Iperf3 & Monitoring 2026 Passed Cloud Infrastructure Engineering Graduate
All answers with rationales

,Table of Contents

Content Area Questions Key Topics

Azure IAAS Architecture AND 1-25 Azure, Nginx, Public, Likely, Cause
Resource Provisioning

Ubuntu VM Deployment AND 26-50 Azure, Ubuntu, Nginx, Configuration, Network
Configuration

Nginx WEB Server 51-75 Azure, Ubuntu, Nginx, Certificate, Throughput
Installation AND
Configuration

Ssl/tls Certificate 76-100 Azure, Nginx, YOU NEED, Throughput, Iperf3
Implementation AND Security

Network Performance 101-125 Azure, Ubuntu, Nginx, Configuration, Likely
Testing WITH Iperf3

Monitoring AND Logging 126-150 Azure, Nginx, Ubuntu, Application, Likely
Setup

TOTAL 150 All questions include answers and detailed rationales

,Section A - Azure IAAS Architecture AND Resource
Provisioning

Q1.
Your Azure VM uses a public IP and a network security group (NSG). You need to allow
HTTPS from the internet but only from a specific IP range. Which NSG rule configuration
is correct and minimizes administrative overhead?


A. Allow HTTPS from Internet, priority 100; B. Allow HTTPS from your IP range, priority
deny all other inbound traffic, priority 4096 100; deny all other inbound traffic, priority
4096

C. Allow HTTPS from Internet, priority 100; D. Allow HTTPS from your IP range, priority
no explicit deny rule needed because 100; no explicit deny rule needed because
default rules deny inbound default rules deny inbound
Correct: B - Allow HTTPS from your IP range, priority 100; deny all other inbound traffic,
priority 4096


Rationale:Default NSG rules allow all inbound from within the virtual network and load
balancer, but deny all other inbound. To restrict HTTPS to your IP, you must add an allow rule
with a higher priority (lower number) and a deny all rule to block other sources. Option B is
correct because it explicitly restricts to your IP and adds a catch-all deny. Option A allows all
internet. Options C and D rely on default rules that do not block all other inbound (they only
deny non-HTTP).

Q2.
After configuring an Azure Linux VM with a public IP and DNS name, you attempt to SSH
from your workstation but receive a timeout. The VM's NSG has an allow rule for SSH (port
22) from your public IP. What is the most likely cause?


A. The VM does not have a public IP B. The SSH service is not running on the
assigned VM

C. The VM is in a stopped (deallocated) D. The NSG is applied to the subnet instead
state of the NIC
Correct: C - The VM is in a stopped (deallocated) state


Rationale:If the VM is stopped (deallocated), its public IP is released and no traffic reaches it,
causing a timeout. A public IP is assigned (option A is false). SSH service not running would
cause a connection refused, not timeout (option B). NSG applied to subnet vs NIC would still
work if rules are correct (option D).




Page 3

, Section A - Azure IAAS Architecture AND Resource Provisioning


Q3.
You are designing an Nginx configuration to serve a web application over HTTPS. You
want to redirect all HTTP traffic to HTTPS and enforce a strong cipher suite. Which
configuration snippet achieves this without breaking the application?


A. server { listen 80; return 301 B. server { listen 80; return 301
https://$host$request_uri; } server { listen https://$host$request_uri; } server { listen
443 ssl; ssl_protocols TLSv1.2 TLSv1.3; 443 ssl; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ssl_ciphers HIGH:!aNULL; }
'ECDHE-ECDSA-AES256-GCM-SHA384'; }

C. server { listen 80; return 301 D. server { listen 80; return 301
https://$host$request_uri; } server { listen https://$host$request_uri; } server { listen
443 ssl; ssl_protocols TLSv1.2 TLSv1.3; 443 ssl; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'DEFAULT'; } ssl_ciphers 'ALL:!aNULL:!eNULL'; }
Correct: A - server { listen 80; return 301 https://$host$request_uri; } server { listen 443
ssl; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384'; }


Rationale:Option A specifies a strong, specific cipher suite that supports forward secrecy
(ECDHE) and AES-GCM, which is recommended for modern security. Option B uses
HIGH:!aNULL, which is broad but may include weaker ciphers. Option C uses DEFAULT,
which is not tailored for security. Option D includes ALL, which is too permissive and not
recommended. Option A is the most secure and precise.

Q4.
You run iperf3 between two Azure VMs in the same region but different availability zones.
The test shows a throughput of 1.2 Gbps. You suspect the result is limited by the VM's
network accelerators. Which action would most likely improve throughput?


A. Increase the number of iperf3 parallel B. Enable Azure Accelerated Networking on
streams both VMs

C. Use a larger TCP window size D. Switch to UDP mode for the test
Correct: B - Enable Azure Accelerated Networking on both VMs


Rationale:Azure Accelerated Networking uses SR-IOV to bypass the host virtual switch,
reducing latency and jitter and improving throughput. Increasing parallel streams (A) can help
but may not overcome the virtual switch bottleneck. TCP window size (C) can improve
throughput on high-latency links, but within a region latency is low. UDP mode (D) does not
reflect TCP performance and may not improve actual application throughput.

Q5.
You need to monitor an Azure VM running Nginx. You want to collect custom metrics (e.g.,
number of active connections) and send them to Azure Monitor Metrics. Which approach
is the most efficient and cost-effective?




Page 4