New (2025) Download free Cloud-Deployment-and-Operations PDF for WGU Practice Tests
100% Free Cloud-Deployment-and-Operations Files For passing the exam Quickly
NEW QUESTION # 13
(A company is using CloudWatch on its EC2 instances. The company needs to determine the number of bytes received by an instance on all network interfaces for proper sizing of the instance. Which metric should the company use?)
- A. NetworkIn
- B. NetworkPacketsOut
- C. NetworkOut
- D. NetworkPacketsIn
Answer: A
Explanation:
The `NetworkIn` metric in Amazon CloudWatch should be used to determine the number of bytes received by an EC2 instance across all network interfaces, aiding in proper instance sizing based on inbound traffic. The WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Metrics) states, "The
`NetworkIn` metric measures the total number of bytes received on all network interfaces of an EC2 instance, providing critical data for sizing decisions to handle inbound traffic effectively." NetworkPacketsIn, NetworkOut, and NetworkPacketsOut measure packet counts or outbound data, which are less relevant for this purpose.
NEW QUESTION # 14
(Which type of support plan provides a technical account manager and full use of Trusted Advisor?)
- A. Developer
- B. Standard
- C. Business
- D. Enterprise
Answer: D
Explanation:
The Enterprise support plan provides a technical account manager (TAM) and full use of Trusted Advisor, offering proactive guidance and comprehensive access to all checks. This plan is designed for large-scale, mission-critical workloads. The WGU Cloud Deployment and Operations Study Guide (Section 6.4, AWS Support Plans) states, "The Enterprise support plan includes a dedicated Technical Account Manager and full Trusted Advisor access, providing 24/7 support and proactive optimization recommendations." Developer, Standard, and Business plans offer limited or no TAM support and partial Trusted Advisor access.
NEW QUESTION # 15
(Which solution should be used to host content to be processed for Amazon Made?)
- A. EC2
- B. DynamoDB
- C. S3
- D. DocumentDB
Answer: C
Explanation:
Amazon S3 (Simple Storage Service) should be used to host content to be processed for Amazon Made, as it provides scalable object storage ideal for storing and retrieving large amounts of data, such as media files or documents, for processing workflows. The WGU Cloud Deployment and Operations Study Guide (Section
2.1, Amazon S3) states, "S3 is the preferred solution for hosting content to be processed by services like Amazon Made, offering durable and highly available storage with support for lifecycle policies and integration with other AWS services." DocumentDB, DynamoDB, and EC2 are not designed for this content hosting purpose.
NEW QUESTION # 16
(Which solution sends DNS queries to separate AWS compute instances?)
- A. Amazon Route 53
- B. Amazon CloudWatch
- C. Amazon EC2 Auto Scaling
- D. AWS Elastic Beanstalk
Answer: A
Explanation:
Amazon Route 53 is the AWS solution that sends DNS queries to separate AWS compute instances by leveraging routing policies to distribute traffic across multiple resources. It acts as a scalable Domain Name System (DNS) service, directing queries to healthy instances based on configurations like latency or weighted routing. The WGU Cloud Deployment and Operations Study Guide (Section 3.1, Route 53) states, "Route 53 uses DNS to route end-user requests to multiple AWS compute instances, supporting features like health checks and traffic distribution." Elastic Beanstalk, CloudWatch, and EC2 Auto Scaling do not perform DNS query routing.
NEW QUESTION # 17
(Which AWS monitoring feature is used to process events using AWS Lambda?)
- A. Metrics
- B. Logs
- C. Rules
- D. Targets
Answer: C
Explanation:
The AWS monitoring feature used to process events with AWS Lambda is CloudWatch Events, specifically through the use of rules. Rules define the events to monitor (e.g., based on event patterns) and specify targets like AWS Lambda functions to process those events. The WGU Cloud Deployment and Operations Study Guide (Section 4.3, CloudWatch Events) explains that rules are the core component for event-driven architectures, enabling automation by linking events to Lambda for processing. Metrics, targets, and logs are related but not the primary feature for this function.
NEW QUESTION # 18
(Which service should be used to horizontally scale Amazon EC2 instances?)
- A. Elastic IPs
- B. Elastic network interface
- C. Elastic Load Balancing
- D. Elastic Beanstalk
Answer: C
Explanation:
Elastic Load Balancing (ELB) should be used to horizontally scale Amazon EC2 instances by distributing incoming traffic across multiple instances, improving availability and fault tolerance. ELB works in conjunction with Auto Scaling groups to add or remove instances based on demand. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, Elastic Load Balancing) notes, "Elastic Load Balancing distributes traffic across EC2 instances, enabling horizontal scaling as part of an Auto Scaling group to handle increased load efficiently." Elastic IPs, elastic network interfaces, and Elastic Beanstalk do not provide this scaling functionality.
NEW QUESTION # 19
(What can AWS Config directly invoke to cause remediation of findings?)
- A. CloudWatch alarm
- B. Systems Manager document
- C. Control Tower guardrail
- D. Lambda function
Answer: D
Explanation:
AWS Config can directly invoke an AWS Lambda function to cause remediation of findings by triggering automated responses to configuration changes or non-compliant resources. This integration enables real-time corrective actions. The WGU Cloud Deployment and Operations Study Guide (Section 6.1, AWS Config) states, "AWS Config can invoke a Lambda function as a remediation action, allowing automated fixes for non- compliant resources (e.g., terminating unauthorized instances)." Control Tower guardrails, CloudWatch alarms, and Systems Manager documents are not directly invoked by Config for this purpose.
NEW QUESTION # 20
(What is used to change stacks across multiple accounts and Regions in a single operation?)
- A. Nested stacks
- B. StackSets
- C. Stack policies
- D. StackInstance
Answer: B
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
StackSets are used to change stacks across multiple AWS accounts and regions in a single operation, enabling centralized management of infrastructure deployments. StackSets allow administrators to create, update, or delete stacks consistently across specified accounts and regions. The WGU Cloud Deployment and Operations Study Guide (Section 5.4, StackSets) states, "StackSets provide the capability to manage and update stacks across multiple accounts and regions with a single operation, streamlining multi-region deployments." StackInstance, nested stacks, and stack policies do not support this multi-account, multi-region functionality.
NEW QUESTION # 21
(An administrator needs to set up self-managed permissions for AWS CloudFormation StackSet operations.
Which two roles should be created in the administrator account and in the target accounts? Choose 2 answers.)
- A. In each target account, create a service role named AWSCloudFormationStackSetExecutionRole that trusts the administrator account.
- B. In the administrator account, create an IAM role named AWSCloudFormationStackSetExecutionRole.
- C. In each target account, create a service role named AWSCloudFormationStackSetAdministrationRole that trusts the administrator account.
- D. In the administrator account, create an IAM role named
AWSCloudFormationStackSetAdministrationRole.
Answer: A,D
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
To set up self-managed permissions for CloudFormation StackSet operations, two roles are required: in the administrator account, create an IAM role named AWSCloudFormationStackSetAdministrationRole to manage StackSet operations, and in each target account, create a service role named AWSCloudFormationStackSetExecutionRole that trusts the administrator account to execute the stacks. The WGU Cloud Deployment and Operations Study Guide (Section 5.4, StackSets) states, "For self-managed permissions, the administrator account requires the AWSCloudFormationStackSetAdministrationRole, while each target account needs the AWSCloudFormationStackSetExecutionRole with a trust relationship to the administrator account for stack deployment." Roles B and D are incorrectly named or misplaced.
NEW QUESTION # 22
(A company has implemented multifactor authentication (MFA) for access to its AWS tenant. Which API call is needed to perform MFA before accessing a resource?)
- A. GetFederationToken
- B. GetCallerIdentity
- C. DecodeAuthorizationMessage
- D. GetSessionToken
Answer: D
Explanation:
The `GetSessionToken` API call is needed to perform MFA before accessing a resource, as it generates temporary security credentials for an IAM user after MFA validation. This ensures secure access to AWS resources. The WGU Cloud Deployment and Operations Study Guide (Section 6.2, IAM and MFA) states,
"The `GetSessionToken` API is used with MFA to obtain temporary credentials, requiring a valid MFA code to authenticate the user before resource access is granted." GetCallerIdentity, GetFederationToken, and DecodeAuthorizationMessage serve different purposes and do not handle MFA authentication.
NEW QUESTION # 23
(What is the role of a patch baseline in Patch Manager?)
- A. Notifies Config of any patch updates that need to be performed
- B. Defines patches that should and should not be installed on EC2 instances
- C. Assigns an IAM role for services that can auto-approve patches upon release
- D. Installs all patch updates as they become available by default
Answer: B
Explanation:
A patch baseline in Patch Manager defines the patches that should and should not be installed on EC2 instances, specifying approval rules for security updates, other updates, and exclusions. This ensures controlled and compliant patching. The WGU Cloud Deployment and Operations Study Guide (Section 5.2, Patch Manager) states, "A patch baseline specifies which patches are approved for installation and which are excluded, allowing customization of patch deployment (e.g., approving only critical security updates)." Options A, B, and D misrepresent the baseline's role, as it does not auto-install, assign IAM roles, or notify Config directly.
NEW QUESTION # 24
(Which Performance Insights view provides information on the hardware resource that may be causing a bottleneck?)
- A. Hosts
- B. Wait event
- C. Statement
- D. Users
Answer: B
Explanation:
The Wait event view in Amazon RDS Performance Insights provides information on hardware resources (e.g., CPU, I/O, memory) that may be causing bottlenecks by showing wait times for database operations. The WGU Cloud Deployment and Operations Study Guide (Section 7.2, Performance Insights) states, "The Wait event view in Performance Insights identifies resource bottlenecks (e.g., I/O wait times) by analyzing wait states, helping optimize database performance on hardware resources." Users, Hosts, and Statement views focus on different aspects and do not directly address hardware bottlenecks.
NEW QUESTION # 25
(A company stores critical data on general-purpose Amazon EBS volumes. The company can only tolerate the loss of up to one hour of data. Which solution should be used to protect data from loss?)
- A. Enable automated volume backups in Cloud Control
- B. Replace existing volumes with local storage
- C. Schedule automated volume snapshots using CloudWatch Events
- D. Switch to Block Express volume type
Answer: C
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
To protect critical data on EBS volumes with a maximum tolerable data loss of one hour, the company should schedule automated volume snapshots using CloudWatch Events. Snapshots capture the state of the volume at a point in time, and regular scheduling (e.g., every hour) ensures data loss is limited to the snapshot interval.
The WGU Cloud Deployment and Operations Study Guide (Section 7.3, EBS and Snapshots) states,
"Automated EBS snapshots can be scheduled using CloudWatch Events rules to create backups at defined intervals, ensuring an RPO of one hour by capturing volume data regularly." Local storage, Cloud Control backups, and Block Express are not viable solutions for this automated snapshot requirement.
NEW QUESTION # 26
(A company has the following disaster recovery requirements: The loss of up to three hours of data is acceptable. Services must be restored within one hour of failure. Which recovery characteristics will allow the company to meet the requirements?)
- A. RPO 4 hours, RTO 1 hour
- B. RPO 1 hour, RTO 4 hours
- C. RPO 2 hours, RTO 1 hour
- D. RPO 1 hour, RTO 2 hours
Answer: A
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
Recovery Point Objective (RPO) measures the maximum acceptable data loss, while Recovery Time Objective (RTO) measures the maximum acceptable downtime. The company requires an RPO of up to 3 hours (acceptable data loss) and an RTO of 1 hour (service restoration time). The correct option is RPO 4 hours, RTO 1 hour, as it meets the RPO requirement (allowing up to 3 hours of data loss is within 4 hours) and satisfies the RTO of 1 hour. The WGU Cloud Deployment and Operations Study Guide (Section 8.1, Disaster Recovery) states, "RPO defines the maximum data loss tolerance (e.g., 3 hours), and RTO defines the maximum downtime (e.g., 1 hour); a configuration of RPO 4 hours and RTO 1 hour aligns with these thresholds." Other options fail to meet both criteria simultaneously.
NEW QUESTION # 27
(An administrator needs to deploy a NAT gateway in an existing VPC subnet. Which two tasks should this administrator perform during deployment? Choose 2 answers.)
- A. Assign an elastic IP address to the NAT gateway
- B. Configure the access control list associated with the subnet
- C. Configure the route table associated with the subnet
- D. Assign a private IP address to the NAT gateway
Answer: A,C
Explanation:
To deploy a NAT gateway in an existing VPC subnet, the administrator must assign an elastic IP address to the NAT gateway for public internet access and configure the route table associated with the subnet to route traffic through the NAT gateway. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, NAT Gateway) states, "Deployment of a NAT gateway requires an elastic IP address for outbound internet connectivity and a route table update to direct private subnet traffic to the NAT gateway (e.g., 0.0.0.0/0 via NAT)." Private IP assignment and ACL configuration are not required steps.
NEW QUESTION # 28
(How are custom metrics grouped in CloudWatch?)
- A. Namespace
- B. Date
- C. Value
- D. Service
Answer: A
Explanation:
In Amazon CloudWatch, custom metrics are organized and grouped using namespaces. A namespace is a container for CloudWatch metrics that allows you to isolate and categorize metrics from different applications or services. According to the WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Metrics), each custom metric must be assigned to a namespace, which acts as a unique identifier to prevent naming collisions and facilitate metric management. Options like Service, Date, and Value are not used for grouping metrics in this context.
NEW QUESTION # 29
(An administrator needs to implement Amazon Route 53 multivalue routing policy. The operator must ensure that Route 53 will respond to incoming requests with the maximum allowed number of records. How many records should be created?)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
The multivalue routing policy in Amazon Route 53 allows up to 8 healthy records to be returned in response to DNS queries, enabling load balancing across multiple resources. To ensure the maximum allowed number of records is utilized, the administrator should create 8 records. The WGU Cloud Deployment and Operations Study Guide (Section 3.1, Route 53 Routing Policies) specifies, "Multivalue answer routing supports up to 8 healthy resource record sets per response, requiring the creation of 8 records to maximize the policy's capability." Options A, C, and D exceed or fall short of this limit.
NEW QUESTION # 30
(Which action must be used to create a metric filter in the Amazon CloudWatch console?)
- A. Define a trace
- B. Enable an alarm
- C. Specify a stream
- D. Select a log group
Answer: D
Explanation:
To create a metric filter in the Amazon CloudWatch console, the first step is to select a log group from which the log data will be analyzed. A log group contains log streams, and metric filters are applied to the log data within these groups to extract metrics based on patterns. The WGU Cloud Deployment and Operations Study Guide (Section 4.2, CloudWatch Logs) specifies that the process begins by navigating to the CloudWatch console, selecting a log group, and then defining the filter pattern. Actions like enabling an alarm, defining a trace, or specifying a stream are subsequent or unrelated steps.
NEW QUESTION # 31
(Which two solutions are supported by CloudWatch? Choose 2 answers.)
- A. Load balancing
- B. Event response
- C. Threat detection
- D. Instance monitoring
Answer: B,D
Explanation:
Amazon CloudWatch supports several monitoring and management solutions, including event response and instance monitoring. Event response is facilitated through CloudWatch Events, which can trigger actions based on predefined rules, such as invoking AWS Lambda functions. Instance monitoring involves collecting and tracking metrics from Amazon EC2 instances, providing visibility into performance and health. The WGU Cloud Deployment and Operations Study Guide (Section 4.1, CloudWatch Overview) highlights that CloudWatch is designed for instance monitoring and event-driven responses, while load balancing and threat detection are handled by services like Elastic Load Balancing and GuardDuty, respectively.
NEW QUESTION # 32
......
Cloud-Deployment-and-Operations Premium Exam Engine - Download Free PDF Questions: https://www.actual4test.com/Cloud-Deployment-and-Operations_examcollection.html
Cloud-Deployment-and-Operations Dumps Questions Study Exam Guide : https://drive.google.com/open?id=1b_XRcYwh1uFOCjC2xyQuNHMQorC9sjS0