Mar-2026 WGU Cloud-Deployment-and-Operations Actual Questions and 100% Cover Real Exam Questions [Q28-Q45]

Rate this post

Mar-2026 WGU Cloud-Deployment-and-Operations Actual Questions and 100% Cover Real Exam Questions

Cloud-Deployment-and-Operations Free Exam Questions and Answers PDF Updated on Mar-2026

WGU Cloud-Deployment-and-Operations Exam Syllabus Topics:

Topic	Details
Topic 1	Optimizing Cost and Performance Baselines: This section of the exam measures skills of Cloud Operations engineers and covers determining the best balance between cost and performance using AWS services. It involves selecting suitable configurations and resource types to maintain efficient operations while avoiding unnecessary spending.
Topic 2	Automating Cloud Provisioning and Maintenance: This section of the exam measures skills of Cloud Operations engineers and covers the ability to automate provisioning tasks and ongoing maintenance activities. It emphasizes using automation tools to streamline cloud resource creation and lifecycle management. Students must demonstrate they can apply automation to maintain efficient cloud operations.
Topic 3	Configuring Cloud Network Connectivity: This section of the exam measures skills of Cloud Engineers and covers network connectivity within AWS environments, including setup, troubleshooting, and corrective actions. Candidates must show they can manage cloud networking in a way that ensures reliable communication between systems and services.
Topic 4	Implementing Cloud Security and Compliance: This section of the exam measures skills of Cloud Engineers and covers the use of AWS security tools to protect data and infrastructure. Candidates must demonstrate awareness of compliance needs and the ability to apply protective controls that align with industry and organizational standards.
Topic 5	Cloud Service Deployment and Management: This section of the exam measures skills of Cloud Engineers and covers the technical knowledge required to deploy, manage, and operate cloud services. It focuses on understanding stability, scalability, backup processes, recovery methods, and general deployment practices. Candidates are expected to show they can handle provisioning, monitoring, and connectivity tasks needed to support cloud environments.
Topic 6	Ensuring Scalability, Elasticity, and Backup Readiness: This section of the exam measures skills of Cloud Operations Specialists and covers implementing AWS features that support scalability, elasticity, and backup readiness. It focuses on enabling cloud systems to handle fluctuating workloads while maintaining continuity and ensuring critical data remains recoverable.

NO.28 (Which two locations can Amazon Inspector publish its findings in when it has detected an anomaly? Choose
2 answers.)

SNS

CloudWatch

CloudTrail

SQS

NO.29 (An organization uses CloudFormation to deploy AWS infrastructure. The templates are built in JSON and deploy EC2 instances across multiple regions. Which solution should be used to set values in the template based on region-specific AMI IDs?)

Outputs

WaitCondition

Mappings

Resources

NO.30 (Which type of support plan provides a technical account manager and full use of Trusted Advisor?)

Enterprise

Standard

Developer

Business

NO.31 (What needs to be configured in Systems Manager to run Automation documents on schedule?)

Maintenance window

Rate control

Session preferences

Resource groups

NO.32 (A company is using Route 53 for Domain Name System (DNS) hosting. The company requires a zone that should only be accessible from instances in a Virtual Private Cloud (VPC). Which type of hosted zone should be used?)

DNS Zone

Private Zone

Lightsail DNS Zone

Public Hosted Zone

NO.33 (What can AWS Config directly invoke to cause remediation of findings?)

Lambda function

Control Tower guardrail

CloudWatch alarm

Systems Manager document

NO.34 (A cloud engineer needs to notify the response team whenever a high-security web server responds with a 403 Forbidden error. Which two steps can enable this functionality? Choose 2 answers.)

Define a metric filter for Apache logs in CloudWatch

Bind a Lambda function to an Apache process

Create an alarm for the metric filter to deliver alerts using Amazon SNS

Send alarms from the Lambda function using Amazon SQS

NO.35 (Which solution should be used to host content to be processed for Amazon Made?)

DocumentDB

DynamoDB

EC2

NO.36 (How are custom metrics grouped in CloudWatch?)

Namespace

Service

Date

Value

NO.37 (A company uses KMS for key management. The company has a requirement to ensure that cryptographic material is not used longer than a year. Which solution should be used to meet this requirement with the least amount of effort?)

Move keys from KMS to CloudHSM

Enable automatic key rotation in KMS

Develop a custom key encryption protocol for KMS

Write a Lambda function to replace keys in KMS

NO.38 (Which function is used to obtain components defined in an AWS CloudFormation template?)

ImportValue

Cidr

Ref

GetAZs

NO.39 (Which two retention periods are supported by Performance Insights? Choose 2 answers.)

1 day

7 days

1 year

2 years

NO.40 (An administrator successfully accesses an EC2 instance via SSH from a local computer then stops it and starts it. Following the restart, the EC2 instance is no longer accessible. Which solution should be used to resolve the issue?)

Add a rule to the security group associated with the NIC of the EC2 instance

Change the port used to connect to EC2 instance

Add a route to the route table associated with the EC2 instance subnet

Change the IP address used to connect to the EC2 instance

NO.41 (A company is using CloudWatch on its EC2 instances. The company needs to determine the number of bytes received by an instance on all network interfaces for proper sizing of the instance. Which metric should the company use?)

NetworkPacketsIn

NetworkOut

NetworkPacketsOut

NetworkIn

NO.42 (What is the advantage of maximizing the time to live of the cache in CloudFront?)

Minimize requests to the origin

Facilitate a high number of requests

Improve a disaster recovery plan

Improve security measures

NO.43 (Which Performance Insights view provides information on the hardware resource that may be causing a bottleneck?)

Wait event

Users

Hosts

Statement

NO.44 (What should be configured in Systems Manager to set the error threshold for automation documents?)

Resource group

Session preferences

Rate control

Maintenance windows

NO.45 (A company has implemented multifactor authentication (MFA) for access to its AWS tenant. Which API call is needed to perform MFA before accessing a resource?)

GetCallerIdentity

GetSessionToken

GetFederationToken

DecodeAuthorizationMessage