[May 10, 2026] Latest Cloud-Deployment-and-Operations PDF Dumps & Real Tests Free Updated Today [Q29-Q52]

May 10, 2026 admin 0

Categories : Cloud-Deployment-and-Operations , WGU

Rate this post

[May 10, 2026] Latest Cloud-Deployment-and-Operations PDF Dumps & Real Tests Free Updated Today

Cloud-Deployment-and-Operations Dumps With 100% Verified Q&As – Pass Guarantee or Full Refund

WGU Cloud-Deployment-and-Operations Exam Syllabus Topics:

Topic	Details
Topic 1	Configuring Cloud Network Connectivity: This section of the exam measures skills of Cloud Engineers and covers network connectivity within AWS environments, including setup, troubleshooting, and corrective actions. Candidates must show they can manage cloud networking in a way that ensures reliable communication between systems and services.
Topic 2	Automating Cloud Provisioning and Maintenance: This section of the exam measures skills of Cloud Operations engineers and covers the ability to automate provisioning tasks and ongoing maintenance activities. It emphasizes using automation tools to streamline cloud resource creation and lifecycle management. Students must demonstrate they can apply automation to maintain efficient cloud operations.
Topic 3	Ensuring Scalability, Elasticity, and Backup Readiness: This section of the exam measures skills of Cloud Operations Specialists and covers implementing AWS features that support scalability, elasticity, and backup readiness. It focuses on enabling cloud systems to handle fluctuating workloads while maintaining continuity and ensuring critical data remains recoverable.

NEW QUESTION 29
(Which performance optimization method must be used when uploading files larger than 5 GB to S3?)

Multipart uploads

Glacier Select

Transfer Acceleration

Intelligent-Tiering

Multipart uploads must be used when uploading files larger than 5 GB to Amazon S3, as this method splits the file into smaller parts for parallel upload, improving reliability and performance. The WGU Cloud Deployment and Operations Study Guide (Section 2.1, S3 Uploads) states, “For files exceeding 5 GB, multipart upload is required in S3, allowing the file to be divided into parts (minimum 5 MB each) for concurrent uploads, ensuring efficient and resumable transfers.” Glacier Select, Transfer Acceleration, and Intelligent-Tiering are not designed for this upload optimization.

NEW QUESTION 30
(Which AWS monitoring feature is used to process events using AWS Lambda?)

Metrics

Logs

Rules

Targets

The AWS monitoring feature used to process events with AWS Lambda is CloudWatch Events, specifically through the use of rules. Rules define the events to monitor (e.g., based on event patterns) and specify targets like AWS Lambda functions to process those events. The WGU Cloud Deployment and Operations Study Guide (Section 4.3, CloudWatch Events) explains that rules are the core component for event-driven architectures, enabling automation by linking events to Lambda for processing. Metrics, targets, and logs are related but not the primary feature for this function.

NEW QUESTION 31
(What is a patch baseline attached to if it is not defined in Patch Manager?)

Baseline data set

Default patch group

Patch process

Accelerate patch baseline

If a patch baseline is not explicitly defined in Patch Manager, it is attached to the default patch group. This default group applies a preconfigured baseline with AWS-recommended patches, ensuring basic compliance for instances without custom baselines. The WGU Cloud Deployment and Operations Study Guide (Section
5.2, Patch Manager) states, “If no custom patch baseline is defined, instances are associated with the default patch group, which uses AWS-provided baseline settings for automatic patch approval.” Options A, C, and D are not valid attachments for patch baselines.

NEW QUESTION 32
(A company is using CloudWatch on its EC2 instances. The company needs to determine the number of bytes received by an instance on all network interfaces for proper sizing of the instance. Which metric should the company use?)

NetworkPacketsIn

NetworkOut

NetworkPacketsOut

NetworkIn

The `NetworkIn` metric in Amazon CloudWatch should be used to determine the number of bytes received by an EC2 instance across all network interfaces, aiding in proper instance sizing based on inbound traffic. The WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Metrics) states, “The
`NetworkIn` metric measures the total number of bytes received on all network interfaces of an EC2 instance, providing critical data for sizing decisions to handle inbound traffic effectively.” NetworkPacketsIn, NetworkOut, and NetworkPacketsOut measure packet counts or outbound data, which are less relevant for this purpose.

NEW QUESTION 33
(An administrator deploys an EC2 instance with the public IP address 54.18.127.233 into a newly created VPC in us-west-2. The EC2 instance must be accessible via ec2-public-54.18.127.233.us-west-2.compute.
amazonaws.com from the internet. Which solution should be used?)

Assign a resource tag to the EC2 instance

Set the VPC attribute enableDnsHostnames to true

Set the VPC attribute enableDnsSupport to false

Assign a resource-based name to the EC2 instance

Comprehensive and Detailed Explanation From Exact Extract:
To make the EC2 instance accessible via a public DNS hostname like ec2-public-54.18.127.233.us-west-2.
compute.amazonaws.com, the administrator must set the VPC attribute enableDnsHostnames to true. This enables the automatic assignment of public DNS hostnames to instances with public IP addresses in the VPC.
The WGU Cloud Deployment and Operations Study Guide (Section 3.2, VPC Configuration) states, “Setting enableDnsHostnames to true in the VPC configuration ensures that EC2 instances with public IPs receive a public DNS hostname (e.g., ec2-public-<ip>.<region>.compute.amazonaws.com), facilitating internet accessibility.” Resource tags, disabling DNS support, and resource-based names do not enable this functionality.</region></ip>

NEW QUESTION 34
(A company has implemented multifactor authentication (MFA) for access to its AWS tenant. Which API call is needed to perform MFA before accessing a resource?)

GetCallerIdentity

GetSessionToken

GetFederationToken

DecodeAuthorizationMessage

The `GetSessionToken` API call is needed to perform MFA before accessing a resource, as it generates temporary security credentials for an IAM user after MFA validation. This ensures secure access to AWS resources. The WGU Cloud Deployment and Operations Study Guide (Section 6.2, IAM and MFA) states,
“The `GetSessionToken` API is used with MFA to obtain temporary credentials, requiring a valid MFA code to authenticate the user before resource access is granted.” GetCallerIdentity, GetFederationToken, and DecodeAuthorizationMessage serve different purposes and do not handle MFA authentication.

NEW QUESTION 35
(An administrator needs to troubleshoot a connectivity issue from on-premises computers to public IP addresses assigned to EC2 instances. The administrator suspects the cause to be a network security group.
Which VPC feature should be used to troubleshoot the issue?)

Flow Logs

PrivateLink

Reachability Analyzer

Traffic Mirroring

Comprehensive and Detailed Explanation From Exact Extract:
The Reachability Analyzer in AWS VPC should be used to troubleshoot connectivity issues from on-premises computers to EC2 instances, especially when a network security group (NSG) is suspected. It analyzes the network path and identifies blocked traffic due to NSG rules or route tables. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, VPC Troubleshooting) states, “Reachability Analyzer helps diagnose connectivity issues by simulating traffic paths, identifying if an NSG rule (e.g., blocked port) or route table is causing the problem from on-premises to EC2 public IPs.” Flow Logs provide data but not analysis, PrivateLink is for private connections, and Traffic Mirroring is for monitoring.

NEW QUESTION 36
(An administrator needs to implement Amazon Route 53 multivalue routing policy. The operator must ensure that Route 53 will respond to incoming requests with the maximum allowed number of records. How many records should be created?)

The multivalue routing policy in Amazon Route 53 allows up to 8 healthy records to be returned in response to DNS queries, enabling load balancing across multiple resources. To ensure the maximum allowed number of records is utilized, the administrator should create 8 records. The WGU Cloud Deployment and Operations Study Guide (Section 3.1, Route 53 Routing Policies) specifies, “Multivalue answer routing supports up to 8 healthy resource record sets per response, requiring the creation of 8 records to maximize the policy’s capability.” Options A, C, and D exceed or fall short of this limit.

NEW QUESTION 37
(Which service should be used to horizontally scale Amazon EC2 instances?)

Elastic Load Balancing

Elastic IPs

Elastic network interface

Elastic Beanstalk

Elastic Load Balancing (ELB) should be used to horizontally scale Amazon EC2 instances by distributing incoming traffic across multiple instances, improving availability and fault tolerance. ELB works in conjunction with Auto Scaling groups to add or remove instances based on demand. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, Elastic Load Balancing) notes, “Elastic Load Balancing distributes traffic across EC2 instances, enabling horizontal scaling as part of an Auto Scaling group to handle increased load efficiently.” Elastic IPs, elastic network interfaces, and Elastic Beanstalk do not provide this scaling functionality.

NEW QUESTION 38
(Which two locations can Amazon Inspector publish its findings in when it has detected an anomaly? Choose
2 answers.)

SNS

CloudWatch

CloudTrail

SQS

Amazon Inspector can publish its findings when detecting anomalies to Amazon SNS for real-time notifications and to CloudWatch for metric and event logging, enabling monitoring and response. The WGU Cloud Deployment and Operations Study Guide (Section 6.2, Amazon Inspector) states, “Inspector findings are published to SNS for immediate alerts and to CloudWatch for detailed logging, allowing integration with other AWS services for anomaly response.” CloudTrail logs API calls, and SQS is a messaging queue, neither of which are primary destinations for Inspector findings.

NEW QUESTION 39
(A company that uses five Elastic IP addresses does not want to request more from AWS. Which solution should be used to route requests to a healthy endpoint?)

Adjust the TTL of the IP packets

Edit the route table for the VPC

Use Systems Manager to update endpoints

To route requests to a healthy endpoint without requesting additional Elastic IP addresses, the company should register a DNS name to an auto-assigned public IP address using a service like Route 53. This leverages dynamic DNS to distribute traffic, reducing reliance on fixed EIPs. The WGU Cloud Deployment and Operations Study Guide (Section 3.1, Route 53) states, “Registering a DNS name with an auto-assigned public IP in Route 53 allows traffic routing to healthy instances, avoiding the need for additional Elastic IP addresses.” TTL adjustment, route table edits, and Systems Manager are not relevant solutions.

NEW QUESTION 40
(A company builds an application that renders 3D movies for its users. The application does this by spawning a fleet of instances that each take a slice of the workload and then render a few hundred frames in around 30 minutes. If processing on a node is interrupted, the work can be moved to other running nodes. The cost to users is based on the underlying AWS cost plus a margin. Which EC2 instance type is most suitable to run workload pattern at the lowest cost?)

Spot Instance

On-Demand Instance

Dedicated Instance

Reserved Instance

Comprehensive and Detailed Explanation From Exact Extract:
Spot Instances are the most suitable EC2 instance type for this workload pattern, offering the lowest cost for short, interruptible tasks like 3D rendering, where work can be redistributed if interrupted. This aligns with the company’s cost-plus pricing model. The WGU Cloud Deployment and Operations Study Guide (Section
7.3, EC2 Instance Types) states, “Spot Instances provide significant cost savings (up to 90% off On-Demand) for fault-tolerant, short-term workloads like rendering, where interruptions can be handled by redistributing tasks to other nodes.” On-Demand, Dedicated, and Reserved Instances are more expensive and less flexible for this use case.

NEW QUESTION 41
(Which feature should be configured to deploy a static website to AWS?)

RDS Proxy

S3 Versioning

Bucket properties

CloudTrail events

Comprehensive and Detailed Explanation From Exact Extract:
To deploy a static website to AWS, the bucket properties of an Amazon S3 bucket should be configured, specifically enabling static website hosting. This involves setting the bucket policy to allow public read access and configuring the index and error documents. The WGU Cloud Deployment and Operations Study Guide (Section 2.1, S3 Static Website Hosting) states, “Configuring bucket properties for static website hosting in S3 involves enabling the website endpoint, setting an index document (e.g., index.html), and applying a bucket policy for public access, making it suitable for hosting static content.” RDS Proxy, S3 Versioning, and CloudTrail events are not relevant to this use case.

NEW QUESTION 42
(Which service enables a company to enforce and manage governance rules across multiple AWS accounts?)

Control Tower

Security Hub

GuardDuty

Systems Manager

AWS Control Tower enables a company to enforce and manage governance rules across multiple AWS accounts by setting up a landing zone with preconfigured policies for security, compliance, and operations. It simplifies multi-account management. The WGU Cloud Deployment and Operations Study Guide (Section
6.5, Control Tower) states, “Control Tower provides a centralized solution to establish and enforce governance rules across multiple accounts, using guardrails and a landing zone to ensure compliance with organizational policies.” Security Hub, GuardDuty, and Systems Manager do not offer this multi-account governance capability.

NEW QUESTION 43
(A company stores critical data on general-purpose Amazon EBS volumes. The company can only tolerate the loss of up to one hour of data. Which solution should be used to protect data from loss?)

Replace existing volumes with local storage

Schedule automated volume snapshots using CloudWatch Events

Enable automated volume backups in Cloud Control

Switch to Block Express volume type

Comprehensive and Detailed Explanation From Exact Extract:
To protect critical data on EBS volumes with a maximum tolerable data loss of one hour, the company should schedule automated volume snapshots using CloudWatch Events. Snapshots capture the state of the volume at a point in time, and regular scheduling (e.g., every hour) ensures data loss is limited to the snapshot interval.
The WGU Cloud Deployment and Operations Study Guide (Section 7.3, EBS and Snapshots) states,
“Automated EBS snapshots can be scheduled using CloudWatch Events rules to create backups at defined intervals, ensuring an RPO of one hour by capturing volume data regularly.” Local storage, Cloud Control backups, and Block Express are not viable solutions for this automated snapshot requirement.

NEW QUESTION 44
(How are custom metrics grouped in CloudWatch?)

Namespace

Service

Date

Value

In Amazon CloudWatch, custom metrics are organized and grouped using namespaces. A namespace is a container for CloudWatch metrics that allows you to isolate and categorize metrics from different applications or services. According to the WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Metrics), each custom metric must be assigned to a namespace, which acts as a unique identifier to prevent naming collisions and facilitate metric management. Options like Service, Date, and Value are not used for grouping metrics in this context.

NEW QUESTION 45
(What is used to change stacks across multiple accounts and Regions in a single operation?)

StackSets

StackInstance

Nested stacks

Stack policies

Comprehensive and Detailed Explanation From Exact Extract:
StackSets are used to change stacks across multiple AWS accounts and regions in a single operation, enabling centralized management of infrastructure deployments. StackSets allow administrators to create, update, or delete stacks consistently across specified accounts and regions. The WGU Cloud Deployment and Operations Study Guide (Section 5.4, StackSets) states, “StackSets provide the capability to manage and update stacks across multiple accounts and regions with a single operation, streamlining multi-region deployments.” StackInstance, nested stacks, and stack policies do not support this multi-account, multi-region functionality.

NEW QUESTION 46
(Which Performance Insights view provides information on the hardware resource that may be causing a bottleneck?)

Wait event

Users

Hosts

Statement

The Wait event view in Amazon RDS Performance Insights provides information on hardware resources (e.g., CPU, I/O, memory) that may be causing bottlenecks by showing wait times for database operations. The WGU Cloud Deployment and Operations Study Guide (Section 7.2, Performance Insights) states, “The Wait event view in Performance Insights identifies resource bottlenecks (e.g., I/O wait times) by analyzing wait states, helping optimize database performance on hardware resources.” Users, Hosts, and Statement views focus on different aspects and do not directly address hardware bottlenecks.

NEW QUESTION 47
(What is the advantage of maximizing the time to live of the cache in CloudFront?)

Minimize requests to the origin

Facilitate a high number of requests

Improve a disaster recovery plan

Improve security measures

Comprehensive and Detailed Explanation From Exact Extract:
Maximizing the time to live (TTL) of the cache in Amazon CloudFront reduces the frequency of requests to the origin server by serving content from edge locations for a longer period, lowering latency and costs. The WGU Cloud Deployment and Operations Study Guide (Section 4.4, CloudFront Caching) states, “A higher TTL in CloudFront caching minimizes origin requests by keeping objects in edge caches longer, reducing load on the origin server and optimizing performance and cost.” Facilitating high request volumes, improving disaster recovery, and enhancing security are not primary benefits of maximizing TTL.

NEW QUESTION 48
(Which solution should be used to host content to be processed for Amazon Made?)

DocumentDB

DynamoDB

EC2

Amazon S3 (Simple Storage Service) should be used to host content to be processed for Amazon Made, as it provides scalable object storage ideal for storing and retrieving large amounts of data, such as media files or documents, for processing workflows. The WGU Cloud Deployment and Operations Study Guide (Section
2.1, Amazon S3) states, “S3 is the preferred solution for hosting content to be processed by services like Amazon Made, offering durable and highly available storage with support for lifecycle policies and integration with other AWS services.” DocumentDB, DynamoDB, and EC2 are not designed for this content hosting purpose.

NEW QUESTION 49
(Which AWS monitoring feature is used to process events using AWS Lambda?)

Metrics

Targets

Rules

Logs

NEW QUESTION 50
(What can AWS Config directly invoke to cause remediation of findings?)

Lambda function

Control Tower guardrail

CloudWatch alarm

Systems Manager document

AWS Config can directly invoke an AWS Lambda function to cause remediation of findings by triggering automated responses to configuration changes or non-compliant resources. This integration enables real-time corrective actions. The WGU Cloud Deployment and Operations Study Guide (Section 6.1, AWS Config) states, “AWS Config can invoke a Lambda function as a remediation action, allowing automated fixes for non- compliant resources (e.g., terminating unauthorized instances).” Control Tower guardrails, CloudWatch alarms, and Systems Manager documents are not directly invoked by Config for this purpose.

NEW QUESTION 51
(Which AWS service is used to provide remote workers with secure access to AWS resources?)

Transit Gateway

Client VPN

Network Firewall

NAT instance

Comprehensive and Detailed Explanation From Exact Extract:
AWS Client VPN is used to provide remote workers with secure access to AWS resources by establishing a VPN connection to the VPC, ensuring encrypted access to private networks. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, Client VPN) states, “Client VPN enables secure remote access to AWS resources within a VPC, using mutual authentication and encryption to protect data for remote workers.” Transit Gateway manages inter-VPC routing, Network Firewall filters traffic, and NAT instances handle outbound internet access, none of which are designed for remote worker access.

NEW QUESTION 52
(Which solution is used to protect a server from Layer 7 attacks?)

WAF

Shield

CloudWatch

KMS key rotation

AWS WAF (Web Application Firewall) is used to protect a server from Layer 7 (application layer) attacks, such as SQL injection or cross-site scripting, by filtering HTTP/HTTPS traffic based on defined rules. The WGU Cloud Deployment and Operations Study Guide (Section 6.2, AWS WAF) states, “WAF protects web applications at Layer 7 by inspecting and blocking malicious requests, such as those involving SQL injection or XSS, when integrated with ALB or CloudFront.” Shield protects against DDoS (Layer 3/4), CloudWatch monitors metrics, and KMS key rotation manages encryption, none of which address Layer 7 attacks.

Loading …