WGU Cloud Deployment and Operations (D341) Exam Questions Instant Access

Question 1

(A company manages a containerized application by manually deploying AWS compute instances. Which solution should be used to optimize the cost of the application?)

AAurora

BRDS

CFargate

DEFS

Answer : C

AWS Fargate should be used to optimize the cost of a containerized application by eliminating the need for manual instance management, as it provides serverless container orchestration that automatically scales and charges only for resource usage. The WGU Cloud Deployment and Operations Study Guide (Section 7.5, Fargate) states, 'Fargate optimizes costs for containerized applications by removing the overhead of managing EC2 instances, scaling automatically, and billing based on vCPU and memory usage, reducing manual deployment expenses.' Aurora, RDS, and EFS are database or storage solutions not designed for container cost optimization.

Question 2

(What should be configured in Systems Manager to set the error threshold for automation documents?)

AResource group

BSession preferences

CRate control

DMaintenance windows

Answer : C

In AWS Systems Manager, the error threshold for automation documents is configured using rate control. Rate control allows administrators to define the maximum number of errors or concurrent executions that can occur before an automation task is throttled or stopped, ensuring system stability. The WGU Cloud Deployment and Operations Study Guide (Section 5.1, Systems Manager Automation) explicitly states, 'Rate control settings in Automation documents can be used to specify the maximum number of errors allowed during execution, helping to manage error thresholds effectively.' Resource groups, session preferences, and maintenance windows do not directly address error thresholds.

Question 3

(An administrator plans to deploy a database to AWS that supports the following: multiple Availability Zones, a standby database instance that provides failover support, a database instance that allows only read-only connections. Which two database solutions should the administrator use? Choose 2 answers.)

AAmazon Aurora DB cluster with multi-master replication

BAmazon Aurora DB instance with Aurora Replica

CAmazon RDS Multi-AZ DB instance

DAmazon RDS Multi-AZ DB cluster

Answer : B, C

To meet the requirements, the administrator should use an Amazon RDS Multi-AZ DB instance for multiple Availability Zones and failover support, and an Amazon Aurora DB instance with Aurora Replica for a read-only connection. The RDS Multi-AZ configuration automatically provisions a standby instance in a different AZ for failover, while Aurora Replicas provide read-only instances for scaling read traffic. The WGU Cloud Deployment and Operations Study Guide (Section 7.1, RDS and Aurora) states, 'RDS Multi-AZ deploys a standby instance across AZs for failover, and Aurora Replicas are read-only instances that enhance performance by offloading read traffic from the primary instance.' Options A and D are incorrect as multi-master replication and Multi-AZ clusters do not align with the read-only requirement.

Question 4

(Which action must be used to create a metric filter in the Amazon CloudWatch console?)

AEnable an alarm

BDefine a trace

CSelect a log group

DSpecify a stream

Answer : C

To create a metric filter in the Amazon CloudWatch console, the first step is to select a log group from which the log data will be analyzed. A log group contains log streams, and metric filters are applied to the log data within these groups to extract metrics based on patterns. The WGU Cloud Deployment and Operations Study Guide (Section 4.2, CloudWatch Logs) specifies that the process begins by navigating to the CloudWatch console, selecting a log group, and then defining the filter pattern. Actions like enabling an alarm, defining a trace, or specifying a stream are subsequent or unrelated steps.

Question 5

(A company builds an application that renders 3D movies for its users. The application does this by spawning a fleet of instances that each take a slice of the workload and then render a few hundred frames in around 30 minutes. If processing on a node is interrupted, the work can be moved to other running nodes. The cost to users is based on the underlying AWS cost plus a margin. Which EC2 instance type is most suitable to run workload pattern at the lowest cost?)

ASpot Instance

BOn-Demand Instance

CDedicated Instance

DReserved Instance

Answer : A

Comprehensive and Detailed Explanation From Exact Extract:

Spot Instances are the most suitable EC2 instance type for this workload pattern, offering the lowest cost for short, interruptible tasks like 3D rendering, where work can be redistributed if interrupted. This aligns with the company's cost-plus pricing model. The WGU Cloud Deployment and Operations Study Guide (Section 7.3, EC2 Instance Types) states, 'Spot Instances provide significant cost savings (up to 90% off On-Demand) for fault-tolerant, short-term workloads like rendering, where interruptions can be handled by redistributing tasks to other nodes.' On-Demand, Dedicated, and Reserved Instances are more expensive and less flexible for this use case.

Question 6

(An administrator successfully accesses an EC2 instance via SSH from a local computer then stops it and starts it. Following the restart, the EC2 instance is no longer accessible. Which solution should be used to resolve the issue?)

AAdd a rule to the security group associated with the NIC of the EC2 instance

BChange the port used to connect to EC2 instance

CAdd a route to the route table associated with the EC2 instance subnet

DChange the IP address used to connect to the EC2 instance

Answer : A

Comprehensive and Detailed Explanation From Exact Extract:

After stopping and starting an EC2 instance, the public IP address may change (unless an Elastic IP is attached), but the security group rules remain intact. If the instance is no longer accessible via SSH, it's likely due to an inbound rule (e.g., for port 22) not being correctly configured or applied. Adding or verifying a rule in the security group associated with the network interface (NIC) to allow SSH (port 22) from the administrator's IP resolves this. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, Security Groups) states, 'Stopping and starting an EC2 instance may require verifying or adding an inbound SSH rule (port 22) in the security group if connectivity is lost due to IP or rule misconfiguration.' Route table or IP changes are not the primary issue here.

Question 7

(A cloud engineer needs to notify the response team whenever a high-security web server responds with a 403 Forbidden error. Which two steps can enable this functionality? Choose 2 answers.)

ADefine a metric filter for Apache logs in CloudWatch

BBind a Lambda function to an Apache process

CCreate an alarm for the metric filter to deliver alerts using Amazon SNS

DSend alarms from the Lambda function using Amazon SQS

Answer : A, C

To notify a response team when a high-security web server returns a 403 Forbidden error, two key steps are required. First, define a metric filter for Apache logs in CloudWatch to detect the 403 error code within the log data. This involves setting up a filter pattern to match '403' in the Apache access logs. Second, create an alarm for the metric filter and configure it to deliver alerts using Amazon SNS, which supports email or other notifications to the response team. The WGU Cloud Deployment and Operations Study Guide (Section 4.2, CloudWatch Logs and Alarms) confirms that metric filters and SNS-integrated alarms are the standard approach for monitoring and alerting on log-based events. Options B and D are incorrect as they involve unnecessary or unsupported configurations (e.g., binding Lambda to Apache or using SQS for alarms).