[Dec 04, 2025] Latest Courses and Certificates Cloud-Deployment-and-Operations Actual Free Exam Questions
Courses and Certificates Cloud-Deployment-and-Operations Dumps Updated Practice Test and 70 unique questions
NEW QUESTION # 22
(What should be configured in Systems Manager to set the error threshold for automation documents?)
- A. Rate control
- B. Maintenance windows
- C. Resource group
- D. Session preferences
Answer: A
Explanation:
In AWS Systems Manager, the error threshold for automation documents is configured using rate control.
Rate control allows administrators to define the maximum number of errors or concurrent executions that can occur before an automation task is throttled or stopped, ensuring system stability. The WGU Cloud Deployment and Operations Study Guide (Section 5.1, Systems Manager Automation) explicitly states, "Rate control settings in Automation documents can be used to specify the maximum number of errors allowed during execution, helping to manage error thresholds effectively." Resource groups, session preferences, and maintenance windows do not directly address error thresholds.
NEW QUESTION # 23
(What is the role of AWS Trusted Advisor?)
- A. It provides recommendations to help follow AWS best practices.
- B. It provides an assessment on unused IAM roles.
- C. It provides recommendations on patches to be performed on resources.
- D. It provides a holistic overview of the health of architecture.
Answer: A
Explanation:
AWS Trusted Advisor provides recommendations to help follow AWS best practices, analyzing the environment for cost optimization, security, performance, and fault tolerance. It offers actionable insights to improve resource usage. The WGU Cloud Deployment and Operations Study Guide (Section 6.4, Trusted Advisor) states, "Trusted Advisor evaluates your AWS environment against best practices, providing recommendations in categories like cost optimization and security (e.g., enabling MFA or removing unused resources)." Options A, B, and C overstate or misrepresent its role, as it does not focus solely on unused IAM roles, holistic health overviews, or patch recommendations.
NEW QUESTION # 24
(A company is using the CloudWatch agent on its EC2 Linux instances. The company needs to determine how long read requests have waited on the instance's I/O for proper sizing of the instance. Which metric should the company use?)
- A. diskio_read_bytes
- B. diskio_reads
- C. disk_io_time
- D. disk_read_ops
Answer: C
Explanation:
The `disk_io_time` metric, collected by the CloudWatch agent on EC2 Linux instances, measures the total time (in milliseconds) that read and write requests have waited on I/O, helping to assess disk performance for instance sizing. The WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Agent Metrics) states, "The `disk_io_time` metric, available via the CloudWatch agent, tracks the time spent waiting for I/O operations, providing insight into disk contention for optimizing EC2 instance sizing." disk_read_ops, diskio_reads, and diskio_read_bytes measure operation counts or bytes, not wait times.
NEW QUESTION # 25
(Which function is used to obtain components defined in an AWS CloudFormation template?)
- A. Cidr
- B. GetAZs
- C. ImportValue
- D. Ref
Answer: D
Explanation:
The `Ref` function in an AWS CloudFormation template is used to obtain values of components defined within the template, such as resource IDs, parameters, or outputs. This function allows dynamic referencing of resources during stack creation. The WGU Cloud Deployment and Operations Study Guide (Section 5.3, CloudFormation Functions) states, "The `Ref` function is used to reference the logical IDs of resources, parameters, or mappings defined in the template, enabling dynamic value retrieval (e.g., `Ref:
MyEC2Instance` returns the instance ID)." ImportValue is used for cross-stack references, Cidr for IP range calculations, and GetAZs for availability zone lists, making them unsuitable here.
NEW QUESTION # 26
(Which AWS monitoring feature is used to process events using AWS Lambda?)
- A. Metrics
- B. Targets
- C. Rules
- D. Logs
Answer: C
Explanation:
The AWS monitoring feature used to process events with AWS Lambda is CloudWatch Events, specifically through the use of rules. Rules define the events to monitor (e.g., based on event patterns) and specify targets like AWS Lambda functions to process those events. The WGU Cloud Deployment and Operations Study Guide (Section 4.3, CloudWatch Events) explains that rules are the core component for event-driven architectures, enabling automation by linking events to Lambda for processing. Metrics, targets, and logs are related but not the primary feature for this function.
NEW QUESTION # 27
(An administrator deploys an EC2 instance with the public IP address 54.18.127.233 into a newly created VPC in us-west-2. The EC2 instance must be accessible via ec2-public-54.18.127.233.us-west-2.compute.
amazonaws.com from the internet. Which solution should be used?)
- A. Assign a resource tag to the EC2 instance
- B. Set the VPC attribute enableDnsHostnames to true
- C. Set the VPC attribute enableDnsSupport to false
- D. Assign a resource-based name to the EC2 instance
Answer: B
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
To make the EC2 instance accessible via a public DNS hostname like ec2-public-54.18.127.233.us-west-2.
compute.amazonaws.com, the administrator must set the VPC attribute enableDnsHostnames to true. This enables the automatic assignment of public DNS hostnames to instances with public IP addresses in the VPC.
The WGU Cloud Deployment and Operations Study Guide (Section 3.2, VPC Configuration) states, "Setting enableDnsHostnames to true in the VPC configuration ensures that EC2 instances with public IPs receive a public DNS hostname (e.g., ec2-public-<ip>.<region>.compute.amazonaws.com), facilitating internet accessibility." Resource tags, disabling DNS support, and resource-based names do not enable this functionality.</region></ip>
NEW QUESTION # 28
(Which feature should be configured to deploy a static website to AWS?)
- A. Bucket properties
- B. CloudTrail events
- C. S3 Versioning
- D. RDS Proxy
Answer: A
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
To deploy a static website to AWS, the bucket properties of an Amazon S3 bucket should be configured, specifically enabling static website hosting. This involves setting the bucket policy to allow public read access and configuring the index and error documents. The WGU Cloud Deployment and Operations Study Guide (Section 2.1, S3 Static Website Hosting) states, "Configuring bucket properties for static website hosting in S3 involves enabling the website endpoint, setting an index document (e.g., index.html), and applying a bucket policy for public access, making it suitable for hosting static content." RDS Proxy, S3 Versioning, and CloudTrail events are not relevant to this use case.
NEW QUESTION # 29
(What needs to be configured in Systems Manager to run Automation documents on schedule?)
- A. Resource groups
- B. Maintenance window
- C. Rate control
- D. Session preferences
Answer: B
Explanation:
To run Automation documents on a schedule in AWS Systems Manager, a maintenance window must be configured. Maintenance windows define the time periods during which automated tasks, including the execution of Automation documents, can run. The WGU Cloud Deployment and Operations Study Guide (Section 5.2, Maintenance Windows) explains that maintenance windows are used to schedule and control the execution of Systems Manager tasks, ensuring they align with operational windows. Rate control, session preferences, and resource groups are not used for scheduling automation tasks.
NEW QUESTION # 30
(How are custom metrics grouped in CloudWatch?)
- A. Namespace
- B. Value
- C. Service
- D. Date
Answer: A
Explanation:
In Amazon CloudWatch, custom metrics are organized and grouped using namespaces. A namespace is a container for CloudWatch metrics that allows you to isolate and categorize metrics from different applications or services. According to the WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Metrics), each custom metric must be assigned to a namespace, which acts as a unique identifier to prevent naming collisions and facilitate metric management. Options like Service, Date, and Value are not used for grouping metrics in this context.
NEW QUESTION # 31
(An administrator plans to deploy a database to AWS that supports the following: multiple Availability Zones, a standby database instance that provides failover support, a database instance that allows only read-only connections. Which two database solutions should the administrator use? Choose 2 answers.)
- A. Amazon Aurora DB instance with Aurora Replica
- B. Amazon Aurora DB cluster with multi-master replication
- C. Amazon RDS Multi-AZ DB instance
- D. Amazon RDS Multi-AZ DB cluster
Answer: A,C
Explanation:
To meet the requirements, the administrator should use an Amazon RDS Multi-AZ DB instance for multiple Availability Zones and failover support, and an Amazon Aurora DB instance with Aurora Replica for a read- only connection. The RDS Multi-AZ configuration automatically provisions a standby instance in a different AZ for failover, while Aurora Replicas provide read-only instances for scaling read traffic. The WGU Cloud Deployment and Operations Study Guide (Section 7.1, RDS and Aurora) states, "RDS Multi-AZ deploys a standby instance across AZs for failover, and Aurora Replicas are read-only instances that enhance performance by offloading read traffic from the primary instance." Options A and D are incorrect as multi- master replication and Multi-AZ clusters do not align with the read-only requirement.
NEW QUESTION # 32
(Which two retention periods are supported by Performance Insights? Choose 2 answers.)
- A. 1 year
- B. 1 day
- C. 2 years
- D. 7 days
Answer: A,D
Explanation:
Amazon RDS Performance Insights supports retention periods of 7 days and 1 year for storing performance data, depending on the configuration and edition. The default retention is 7 days for standard monitoring, while enabling enhanced monitoring or the Performance Insights extended retention feature allows data to be retained for up to 1 year. The WGU Cloud Deployment and Operations Study Guide (Section 7.2, Performance Insights) states, "Performance Insights offers a 7-day retention period by default, with an option to extend to 1 year for detailed historical analysis, supporting cost and performance optimization." Options A (1 day) and D (2 years) are not supported retention periods.
NEW QUESTION # 33
(An administrator sets up a route table with the default outbound route via an internet gateway and links it to a VPC. Which solution should be used to ensure the route takes effect?)
- A. Configure tags
- B. Configure propagation
- C. Create a subnet association
- D. Create an edge association
Answer: C
Explanation:
To ensure the route table with a default outbound route via an internet gateway takes effect, the administrator must create a subnet association, linking the route table to specific subnets within the VPC. This association applies the routing rules to the subnet's traffic. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, VPC Routing) states, "A route table must be associated with a subnet (subnet association) to enforce routing rules, such as the default route to an internet gateway, ensuring outbound traffic follows the defined path." Propagation, tags, and edge associations do not activate the route.
NEW QUESTION # 34
(A company stores critical data on general-purpose Amazon EBS volumes. The company can only tolerate the loss of up to one hour of data. Which solution should be used to protect data from loss?)
- A. Replace existing volumes with local storage
- B. Switch to Block Express volume type
- C. Schedule automated volume snapshots using CloudWatch Events
- D. Enable automated volume backups in Cloud Control
Answer: C
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
To protect critical data on EBS volumes with a maximum tolerable data loss of one hour, the company should schedule automated volume snapshots using CloudWatch Events. Snapshots capture the state of the volume at a point in time, and regular scheduling (e.g., every hour) ensures data loss is limited to the snapshot interval.
The WGU Cloud Deployment and Operations Study Guide (Section 7.3, EBS and Snapshots) states,
"Automated EBS snapshots can be scheduled using CloudWatch Events rules to create backups at defined intervals, ensuring an RPO of one hour by capturing volume data regularly." Local storage, Cloud Control backups, and Block Express are not viable solutions for this automated snapshot requirement.
NEW QUESTION # 35
(A company is developing an application with the following requirements: * Amazon EC2 instances must be restricted to Free Tier-eligible types. * Instances of unapproved types must be terminated automatically.
Which two services should be used? Choose 2 answers.)
- A. Launch Wizard
- B. Systems Manager
- C. OpsWorks
- D. Config
Answer: B,D
Explanation:
To meet the requirements of restricting EC2 instances to Free Tier-eligible types and automatically terminating unapproved instances, AWS Systems Manager and AWS Config should be used. Systems Manager can enforce instance compliance through automation documents that monitor and terminate non- compliant instances. AWS Config provides continuous monitoring and evaluation of resource configurations against defined rules, such as those limiting instance types to Free Tier-eligible options (e.g., t2.micro or t3.
micro). The WGU Cloud Deployment and Operations Study Guide (Section 6.1, AWS Config and Systems Manager) notes, "AWS Config can be configured with a rule to detect non-Free Tier EC2 instances, while Systems Manager Automation can execute a termination script based on Config findings." OpsWorks and Launch Wizard are not designed for this specific compliance and automation use case.
NEW QUESTION # 36
(Which AWS solution can send email based on CloudWatch alarms?)
- A. Kinesis
- B. Simple Queue Service (SQS)
- C. Amplify
- D. Simple Notification Service (SNS)
Answer: D
Explanation:
Amazon CloudWatch alarms can trigger notifications when a metric breaches a defined threshold. The AWS solution designed to send emails based on these alarms is Amazon Simple Notification Service (SNS). SNS supports sending notifications via email, SMS, and other protocols when subscribed endpoints are triggered by CloudWatch alarms. The WGU Cloud Deployment and Operations Study Guide (Section 4.3, Monitoring and Alarms) states that SNS is the primary service for delivering notifications from CloudWatch, allowing users to configure emailsubscriptions for alarm states. Other options like SQS, Amplify, and Kinesis are not designed for this purpose.
NEW QUESTION # 37
(What is the role of a patch baseline in Patch Manager?)
- A. Assigns an IAM role for services that can auto-approve patches upon release
- B. Notifies Config of any patch updates that need to be performed
- C. Defines patches that should and should not be installed on EC2 instances
- D. Installs all patch updates as they become available by default
Answer: C
Explanation:
A patch baseline in Patch Manager defines the patches that should and should not be installed on EC2 instances, specifying approval rules for security updates, other updates, and exclusions. This ensures controlled and compliant patching. The WGU Cloud Deployment and Operations Study Guide (Section 5.2, Patch Manager) states, "A patch baseline specifies which patches are approved for installation and which are excluded, allowing customization of patch deployment (e.g., approving only critical security updates)." Options A, B, and D misrepresent the baseline's role, as it does not auto-install, assign IAM roles, or notify Config directly.
NEW QUESTION # 38
(A company is using CloudWatch on its EC2 instances. The company needs to determine the number of bytes received by an instance on all network interfaces for proper sizing of the instance. Which metric should the company use?)
- A. NetworkPacketsOut
- B. NetworkIn
- C. NetworkOut
- D. NetworkPacketsIn
Answer: B
Explanation:
The `NetworkIn` metric in Amazon CloudWatch should be used to determine the number of bytes received by an EC2 instance across all network interfaces, aiding in proper instance sizing based on inbound traffic. The WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Metrics) states, "The
`NetworkIn` metric measures the total number of bytes received on all network interfaces of an EC2 instance, providing critical data for sizing decisions to handle inbound traffic effectively." NetworkPacketsIn, NetworkOut, and NetworkPacketsOut measure packet counts or outbound data, which are less relevant for this purpose.
NEW QUESTION # 39
(What is a patch baseline attached to if it is not defined in Patch Manager?)
- A. Accelerate patch baseline
- B. Baseline data set
- C. Patch process
- D. Default patch group
Answer: D
Explanation:
If a patch baseline is not explicitly defined in Patch Manager, it is attached to the default patch group. This default group applies a preconfigured baseline with AWS-recommended patches, ensuring basic compliance for instances without custom baselines. The WGU Cloud Deployment and Operations Study Guide (Section
5.2, Patch Manager) states, "If no custom patch baseline is defined, instances are associated with the default patch group, which uses AWS-provided baseline settings for automatic patch approval." Options A, C, and D are not valid attachments for patch baselines.
NEW QUESTION # 40
(Which AWS CloudFormation feature should be used to specify the AWS resources to be provisioned?)
- A. StackSet
- B. Change set
- C. Exports
- D. Template
Answer: D
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
The CloudFormation template feature should be used to specify the AWS resources to be provisioned. A template is a JSON or YAML file that defines the resources (e.g., EC2 instances, S3 buckets) and their configurations for deployment. The WGU Cloud Deployment and Operations Study Guide (Section 5.3, CloudFormation Templates) states, "The template is the core component of CloudFormation, containing the resource specifications and properties that are provisioned when a stack is created." Change sets, exports, and stack sets serve different purposes (e.g., previewing changes, sharing outputs, managing multiple stacks).
NEW QUESTION # 41
(What should be used to monitor estimated AWS charges?)
- A. Cognito
- B. Forecast
- C. Billing alarm
- D. Pricing Calculator
Answer: C
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
A Billing alarm in Amazon CloudWatch should be used to monitor estimated AWS charges by setting thresholds on cost metrics and triggering notifications when exceeded. This helps manage budgets effectively.
The WGU Cloud Deployment and Operations Study Guide (Section 7.4, Cost Monitoring) states, "Billing alarms in CloudWatch monitor estimated charges against a defined threshold, sending alerts via SNS to prevent cost overruns." Cognito handles user authentication, Pricing Calculator estimates costs pre- deployment, and Forecast predicts usage, none of which monitor real-time charges.
NEW QUESTION # 42
(Which AWS solution can be used to send events from Shopify?)
- A. CloudTrail events
- B. EventBridge
- C. Service events
- D. IoT Events
Answer: B
Explanation:
Amazon EventBridge is the AWS solution that can be used to send events from external sources like Shopify.
EventBridge supports integration with third-party applications through its event bus, allowing custom events (e.g., from Shopify via webhooks) to be ingested and routed to AWS services or targets. The WGU Cloud Deployment and Operations Study Guide (Section 4.3, EventBridge) notes that EventBridge is designed for event ingestion from SaaS applications, making it suitable for Shopify integration. CloudTrail, IoT Events, and Service events are not designed for this purpose.
NEW QUESTION # 43
(An administrator needs to set up self-managed permissions for AWS CloudFormation StackSet operations.
Which two roles should be created in the administrator account and in the target accounts? Choose 2 answers.)
- A. In each target account, create a service role named AWSCloudFormationStackSetAdministrationRole that trusts the administrator account.
- B. In the administrator account, create an IAM role named AWSCloudFormationStackSetExecutionRole.
- C. In each target account, create a service role named AWSCloudFormationStackSetExecutionRole that trusts the administrator account.
- D. In the administrator account, create an IAM role named
AWSCloudFormationStackSetAdministrationRole.
Answer: C,D
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
To set up self-managed permissions for CloudFormation StackSet operations, two roles are required: in the administrator account, create an IAM role named AWSCloudFormationStackSetAdministrationRole to manage StackSet operations, and in each target account, create a service role named AWSCloudFormationStackSetExecutionRole that trusts the administrator account to execute the stacks. The WGU Cloud Deployment and Operations Study Guide (Section 5.4, StackSets) states, "For self-managed permissions, the administrator account requires the AWSCloudFormationStackSetAdministrationRole, while each target account needs the AWSCloudFormationStackSetExecutionRole with a trust relationship to the administrator account for stack deployment." Roles B and D are incorrectly named or misplaced.
NEW QUESTION # 44
......
Verified Cloud-Deployment-and-Operations dumps Q&As - 100% Pass from Lead2PassExam: https://examsforall.lead2passexam.com/WGU/valid-Cloud-Deployment-and-Operations-exam-dumps.html