WGU D782 TASK 2 – NETWORK SECURITY
CloudCampusIQ AWS Deployment Flask HTTPS Security Implementation Complete Technical Exemplar 2026/2027
,TABLE OF CONTENTS / EXAM BLUEPRINT
Section 1: 1. Network Security Fundamentals – Threats, Vulnerabilities
Section 2: 2. AWS Deployment – EC2, VPC, Subnet, Security Group
Section 3: 3. Flask Application – Routes, Endpoints, Error Handling
Section 4: 4. HTTPS & TLS 1.3 – Certificates, SSL Context
Section 5: 5. Security Implementation – Firewall, IAM, Encryption
Section 6: 6. CloudCampusIQ Architecture – Elastic Beanstalk
Section 7: 7. Flask Security – Input Validation, Auth, Session
Section 8: 8. Monitoring, Logging & Incident Response
Section 9: 9. Task 2 Integration – Complete Technical Exemplar
,EXAM BLUEPRINT & INSTRUCTIONS
About This Exam:
• 200 original with complete technical exemplar – 100% different – fixed factory – new image cover that goes with exam – AWS network
• Covers both tracks: AWS Deployment/EC2/VPC/Security Group/Elastic Beanstalk and Flask Application/HTTPS/TLS 1.3/Security Imple
• Aligned to WGU D782 HKN1 Task 2 Network Security CloudCampusIQ AWS Deployment Flask Application HTTPS Security Implemen
• Reflects Task 2 format – EC2 t2.micro VPC 10.0.0.0/16 subnet 10.0.1.0/24 security group 443 22 Flask app.route SSL context cert.pem
Instructions:
1. Pace yourself: 200Q complete technical exemplar with source code
2. Read last line first: network security AWS deployment Flask HTTPS security implementation
3. AWS Deployment: EC2 t2.micro VPC CIDR 10.0.0.0/16 subnet public 10.0.1.0/24 security group inbound 443 HTTPS 22 SSH restricte
4. Flask Application: app = Flask(__name__) @app.route('/api/secure' methods POST) def secure_endpoint() jsonify status success mes
5. HTTPS & Security: SSL context cert.pem key.pem port 443 TLS 1.3 HSTS redirect HTTP to HTTPS ACM AWS Certificate Manager e
6. Complete Exemplar: source code app.py Flask run host 0.0.0.0 port 443 ssl_context secure network flow EC2 VPC subnet security gr
, SECTION ONE: QUESTIONS 1-200
Choose the single best answer. Correct answers and rationales follow each item.
1. Network Security Fundamentals – Threats, Vulnerabilities
Question 1. Which deployment step for encryption at rest S3 SSE KMS correctly
produces VPC CIDR 10.0.0.0/16 subnet 10.0.1.0/24 per AWS Elastic Beanstalk exemplar?
WGU D782 HKN1 Task 2 Network Security CloudCampusIQ AWS Deployment Flask Application
HTTPS Security Implementation Complete Technical Exemplar with Source Code 2026/2027
Updated.
A. encryption at rest S3 SSE KMS: data protection → network. Complete technical exemplar
Q1: data protection implements VPC CIDR 10.0.0.0/16 subnet 10.0.1.0/24 via AWS
deployment Flask HTTPS with source code for D782 Task 2.
B. Confuse encryption at rest S3 SSE KMS with VPC CIDR 10.0.0.0/16 subnet 10.0.1.0/24:
deploy Flask on port 80 without SSL – insecure for Task 2.
C. Miscalculate encryption at rest S3 SSE KMS as WAF not needed – Task 2 exemplar error.
D. Ignore encryption at rest S3 SSE KMS: assume Flask no input validation – incorrect
security.
CORRECT ANSWER: A. encryption at rest S3 SSE KMS: data protection → network. Complete
technical exemplar Q1: data protection implements VPC CIDR 10.0.0.0/16 subnet
10.0.1.0/24 via AWS deployment Flask HTTPS with source code for D782 Task 2.
RATIONALE: encryption: data protection → network. Secure deployment via AWS Flask HTTPS.
Others insecure. Per D782 Task 2 exemplar.
Question 2. Which deployment step for source code app.py requirements.txt Procfile
correctly produces SSL context cert.pem key.pem TLS 1.3 per AWS Elastic Beanstalk
exemplar? WGU D782 HKN1 Task 2 Network Security CloudCampusIQ AWS Deployment Flask
Application HTTPS Security Implementation Complete Technical Exemplar with Source
Code 2026/2027 Updated.
A. Ignore source code app.py requirements.txt Procfile: assume no logging needed –
incorrect security.
B. Miscalculate source code app.py requirements.txt Procfile as WAF not needed – Task 2
exemplar error.
C. Confuse source code app.py requirements.txt Procfile with SSL context cert.pem
key.pem TLS 1.3: deploy Flask on port 80 without SSL – insecure for Task 2.
D. source code app.py requirements.txt Procfile: exemplar files → HTTPS. Complete
technical exemplar Q2: exemplar files implements SSL context cert.pem key.pem TLS 1.3
via AWS deployment Flask HTTPS with source code for D782 Task 2.
CORRECT ANSWER: D. source code app.py requirements.txt Procfile: exemplar files →
HTTPS. Complete technical exemplar Q2: exemplar files implements SSL context cert.pem
key.pem TLS 1.3 via AWS deployment Flask HTTPS with source code for D782 Task 2.
RATIONALE: source: exemplar files → HTTPS. Secure deployment via AWS Flask HTTPS. Others
insecure. Per D782 Task 2 exemplar.
Question 3. For SSL context cert.pem key.pem TLS 1.3, which configuration correctly
implements Flask jsonify status success message secured via HTTPS per WGU D782 Task
2 CloudCampusIQ AWS deployment with Flask HTTPS security? WGU D782 HKN1 Task 2
Network Security CloudCampusIQ AWS Deployment Flask Application HTTPS Security
Implementation Complete Technical Exemplar with Source Code 2026/2027 Updated.
A. Ignore SSL context cert.pem key.pem TLS 1.3: assume IAM full admin always – incorrect
security.
B. Miscalculate SSL context cert.pem key.pem TLS 1.3 as HTTPS redirect not required –
Task 2 exemplar error.
C. Confuse SSL context cert.pem key.pem TLS 1.3 with Flask jsonify status success
message secured via HTTPS: deploy Flask on port 80 without SSL – insecure for Task 2.
CloudCampusIQ AWS Deployment Flask HTTPS Security Implementation Complete Technical Exemplar 2026/2027
,TABLE OF CONTENTS / EXAM BLUEPRINT
Section 1: 1. Network Security Fundamentals – Threats, Vulnerabilities
Section 2: 2. AWS Deployment – EC2, VPC, Subnet, Security Group
Section 3: 3. Flask Application – Routes, Endpoints, Error Handling
Section 4: 4. HTTPS & TLS 1.3 – Certificates, SSL Context
Section 5: 5. Security Implementation – Firewall, IAM, Encryption
Section 6: 6. CloudCampusIQ Architecture – Elastic Beanstalk
Section 7: 7. Flask Security – Input Validation, Auth, Session
Section 8: 8. Monitoring, Logging & Incident Response
Section 9: 9. Task 2 Integration – Complete Technical Exemplar
,EXAM BLUEPRINT & INSTRUCTIONS
About This Exam:
• 200 original with complete technical exemplar – 100% different – fixed factory – new image cover that goes with exam – AWS network
• Covers both tracks: AWS Deployment/EC2/VPC/Security Group/Elastic Beanstalk and Flask Application/HTTPS/TLS 1.3/Security Imple
• Aligned to WGU D782 HKN1 Task 2 Network Security CloudCampusIQ AWS Deployment Flask Application HTTPS Security Implemen
• Reflects Task 2 format – EC2 t2.micro VPC 10.0.0.0/16 subnet 10.0.1.0/24 security group 443 22 Flask app.route SSL context cert.pem
Instructions:
1. Pace yourself: 200Q complete technical exemplar with source code
2. Read last line first: network security AWS deployment Flask HTTPS security implementation
3. AWS Deployment: EC2 t2.micro VPC CIDR 10.0.0.0/16 subnet public 10.0.1.0/24 security group inbound 443 HTTPS 22 SSH restricte
4. Flask Application: app = Flask(__name__) @app.route('/api/secure' methods POST) def secure_endpoint() jsonify status success mes
5. HTTPS & Security: SSL context cert.pem key.pem port 443 TLS 1.3 HSTS redirect HTTP to HTTPS ACM AWS Certificate Manager e
6. Complete Exemplar: source code app.py Flask run host 0.0.0.0 port 443 ssl_context secure network flow EC2 VPC subnet security gr
, SECTION ONE: QUESTIONS 1-200
Choose the single best answer. Correct answers and rationales follow each item.
1. Network Security Fundamentals – Threats, Vulnerabilities
Question 1. Which deployment step for encryption at rest S3 SSE KMS correctly
produces VPC CIDR 10.0.0.0/16 subnet 10.0.1.0/24 per AWS Elastic Beanstalk exemplar?
WGU D782 HKN1 Task 2 Network Security CloudCampusIQ AWS Deployment Flask Application
HTTPS Security Implementation Complete Technical Exemplar with Source Code 2026/2027
Updated.
A. encryption at rest S3 SSE KMS: data protection → network. Complete technical exemplar
Q1: data protection implements VPC CIDR 10.0.0.0/16 subnet 10.0.1.0/24 via AWS
deployment Flask HTTPS with source code for D782 Task 2.
B. Confuse encryption at rest S3 SSE KMS with VPC CIDR 10.0.0.0/16 subnet 10.0.1.0/24:
deploy Flask on port 80 without SSL – insecure for Task 2.
C. Miscalculate encryption at rest S3 SSE KMS as WAF not needed – Task 2 exemplar error.
D. Ignore encryption at rest S3 SSE KMS: assume Flask no input validation – incorrect
security.
CORRECT ANSWER: A. encryption at rest S3 SSE KMS: data protection → network. Complete
technical exemplar Q1: data protection implements VPC CIDR 10.0.0.0/16 subnet
10.0.1.0/24 via AWS deployment Flask HTTPS with source code for D782 Task 2.
RATIONALE: encryption: data protection → network. Secure deployment via AWS Flask HTTPS.
Others insecure. Per D782 Task 2 exemplar.
Question 2. Which deployment step for source code app.py requirements.txt Procfile
correctly produces SSL context cert.pem key.pem TLS 1.3 per AWS Elastic Beanstalk
exemplar? WGU D782 HKN1 Task 2 Network Security CloudCampusIQ AWS Deployment Flask
Application HTTPS Security Implementation Complete Technical Exemplar with Source
Code 2026/2027 Updated.
A. Ignore source code app.py requirements.txt Procfile: assume no logging needed –
incorrect security.
B. Miscalculate source code app.py requirements.txt Procfile as WAF not needed – Task 2
exemplar error.
C. Confuse source code app.py requirements.txt Procfile with SSL context cert.pem
key.pem TLS 1.3: deploy Flask on port 80 without SSL – insecure for Task 2.
D. source code app.py requirements.txt Procfile: exemplar files → HTTPS. Complete
technical exemplar Q2: exemplar files implements SSL context cert.pem key.pem TLS 1.3
via AWS deployment Flask HTTPS with source code for D782 Task 2.
CORRECT ANSWER: D. source code app.py requirements.txt Procfile: exemplar files →
HTTPS. Complete technical exemplar Q2: exemplar files implements SSL context cert.pem
key.pem TLS 1.3 via AWS deployment Flask HTTPS with source code for D782 Task 2.
RATIONALE: source: exemplar files → HTTPS. Secure deployment via AWS Flask HTTPS. Others
insecure. Per D782 Task 2 exemplar.
Question 3. For SSL context cert.pem key.pem TLS 1.3, which configuration correctly
implements Flask jsonify status success message secured via HTTPS per WGU D782 Task
2 CloudCampusIQ AWS deployment with Flask HTTPS security? WGU D782 HKN1 Task 2
Network Security CloudCampusIQ AWS Deployment Flask Application HTTPS Security
Implementation Complete Technical Exemplar with Source Code 2026/2027 Updated.
A. Ignore SSL context cert.pem key.pem TLS 1.3: assume IAM full admin always – incorrect
security.
B. Miscalculate SSL context cert.pem key.pem TLS 1.3 as HTTPS redirect not required –
Task 2 exemplar error.
C. Confuse SSL context cert.pem key.pem TLS 1.3 with Flask jsonify status success
message secured via HTTPS: deploy Flask on port 80 without SSL – insecure for Task 2.
