Page 1 of 99
WGU D282 Cloud Foundations Exam Versions A
& B and Study Guides – Complete 300 Questions
with Verified Detailed Answers
Official Exam Overview:
The WGU D282 Cloud Foundations Exam evaluates learners’ understanding of cloud computing
concepts, services, and infrastructure. The exam emphasizes cloud deployment models,
networking, storage, security, and management within cloud platforms, including practical
applications using AWS.
Exam Coverage Areas:
• Cloud Computing Concepts and Deployment Models
• AWS Core Services: Compute, Storage, and Networking
• Virtual Networks and Cloud Security
• Cloud Resource Management and Monitoring
• Cloud Storage Solutions
• Networking Services and Connectivity Options
• Cloud Best Practices and Governance
• Multiple Choice and Short Answer Question Formats
QUESTION 1: Which AWS networking service enables a company to create a virtual network
within AWS?
a) AWS Config
b) Amazon Route 53
c) AWS Direct Connect
d) Amazon Virtual Private Cloud (Amazon VPC) ✅
Rationale: Amazon VPC allows users to create isolated virtual networks within AWS,
providing full control over network configuration, IP addressing, subnets, and routing.
QUESTION 2: Which AWS service is primarily used to map domain names to IP addresses?
a) AWS Config
b) Amazon Route 53 ✅
c) AWS Direct Connect
d) Amazon VPC
Rationale: Amazon Route 53 is a scalable DNS web service that translates domain names into
IP addresses for AWS resources.
QUESTION 3: Which AWS service provides a dedicated network connection from an on-
premises data center to AWS?
,Page 2 of 99
a) AWS Config
b) Amazon Route 53
c) AWS Direct Connect ✅
d) Amazon VPC
Rationale: AWS Direct Connect establishes a private, high-bandwidth connection between an
organization’s data center and AWS, improving performance and security.
QUESTION 4: Which service allows monitoring and auditing AWS resource configurations and
changes?
a) AWS Config ✅
b) Amazon VPC
c) Route 53
d) Direct Connect
Rationale: AWS Config provides visibility into configuration changes and compliance of AWS
resources, helping maintain governance and security.
QUESTION 5: What is a primary benefit of using Amazon VPC in AWS?
a) Fully managed DNS service
b) Dedicated physical connection to AWS
c) Isolation and control over network environment ✅
d) Automatic cloud configuration
Rationale: Amazon VPC provides an isolated and secure network environment in AWS,
allowing organizations to control subnets, routing tables, and security settings.
Which AWS networking service enables a company to create a virtual network within AWS?
A) AWS Config
B) Amazon Route 53
C) AWS Direct Connect
D) Amazon Virtual Private Cloud (Amazon VPC)
D) Amazon Virtual Private Cloud (Amazon VPC)
Which of the following is AWS's responsibility under the AWS shared responsibility model?
A) Configuring third-party applications
B) Maintaining physical hardware
C) Securing application access and data
,Page 3 of 99
D) Managing custom Amazon Machine Images (AMIs
B) Maintaining physical hardware
Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-
latency
delivery?
A) AWS Regions
B) AWS edge locations
C) AWS Availability Zones
D) Amazon Virtual Private Cloud (Amazon VPC)
1
, Page 4 of 99
B) AWS edge locations
How would a system administrator add an additional layer of login security to a user's AWS
Management Console?
A) Use AWS Cloud Directory
B) Audit AWS Identity and Access Management (IAM) roles
C) Enable Multi-Factor Authentication
D) Enable AWS CloudTrail
C) Enable Multi-Factor Authentication
Which service can identify the user that made the API call when an Amazon Elastic Compute
Cloud
(Amazon EC2) instance is terminated?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS X-Ray
D) AWS Identity and Access Management (AWS IAM)
B) AWS CloudTrail
Which service would you use to send alerts based on Amazon CloudWatch alarms?
A) Amazon Simple Notification Service (Amazon SNS)
B) AWS CloudTrail
C) AWS Trusted Advisor
D) Amazon Route 53
A) Amazon Simple Notification Service (Amazon SNS)
Where can a customer find information about prohibited actions on AWS infrastructure?
A) AWS Trusted Advisor
2
WGU D282 Cloud Foundations Exam Versions A
& B and Study Guides – Complete 300 Questions
with Verified Detailed Answers
Official Exam Overview:
The WGU D282 Cloud Foundations Exam evaluates learners’ understanding of cloud computing
concepts, services, and infrastructure. The exam emphasizes cloud deployment models,
networking, storage, security, and management within cloud platforms, including practical
applications using AWS.
Exam Coverage Areas:
• Cloud Computing Concepts and Deployment Models
• AWS Core Services: Compute, Storage, and Networking
• Virtual Networks and Cloud Security
• Cloud Resource Management and Monitoring
• Cloud Storage Solutions
• Networking Services and Connectivity Options
• Cloud Best Practices and Governance
• Multiple Choice and Short Answer Question Formats
QUESTION 1: Which AWS networking service enables a company to create a virtual network
within AWS?
a) AWS Config
b) Amazon Route 53
c) AWS Direct Connect
d) Amazon Virtual Private Cloud (Amazon VPC) ✅
Rationale: Amazon VPC allows users to create isolated virtual networks within AWS,
providing full control over network configuration, IP addressing, subnets, and routing.
QUESTION 2: Which AWS service is primarily used to map domain names to IP addresses?
a) AWS Config
b) Amazon Route 53 ✅
c) AWS Direct Connect
d) Amazon VPC
Rationale: Amazon Route 53 is a scalable DNS web service that translates domain names into
IP addresses for AWS resources.
QUESTION 3: Which AWS service provides a dedicated network connection from an on-
premises data center to AWS?
,Page 2 of 99
a) AWS Config
b) Amazon Route 53
c) AWS Direct Connect ✅
d) Amazon VPC
Rationale: AWS Direct Connect establishes a private, high-bandwidth connection between an
organization’s data center and AWS, improving performance and security.
QUESTION 4: Which service allows monitoring and auditing AWS resource configurations and
changes?
a) AWS Config ✅
b) Amazon VPC
c) Route 53
d) Direct Connect
Rationale: AWS Config provides visibility into configuration changes and compliance of AWS
resources, helping maintain governance and security.
QUESTION 5: What is a primary benefit of using Amazon VPC in AWS?
a) Fully managed DNS service
b) Dedicated physical connection to AWS
c) Isolation and control over network environment ✅
d) Automatic cloud configuration
Rationale: Amazon VPC provides an isolated and secure network environment in AWS,
allowing organizations to control subnets, routing tables, and security settings.
Which AWS networking service enables a company to create a virtual network within AWS?
A) AWS Config
B) Amazon Route 53
C) AWS Direct Connect
D) Amazon Virtual Private Cloud (Amazon VPC)
D) Amazon Virtual Private Cloud (Amazon VPC)
Which of the following is AWS's responsibility under the AWS shared responsibility model?
A) Configuring third-party applications
B) Maintaining physical hardware
C) Securing application access and data
,Page 3 of 99
D) Managing custom Amazon Machine Images (AMIs
B) Maintaining physical hardware
Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-
latency
delivery?
A) AWS Regions
B) AWS edge locations
C) AWS Availability Zones
D) Amazon Virtual Private Cloud (Amazon VPC)
1
, Page 4 of 99
B) AWS edge locations
How would a system administrator add an additional layer of login security to a user's AWS
Management Console?
A) Use AWS Cloud Directory
B) Audit AWS Identity and Access Management (IAM) roles
C) Enable Multi-Factor Authentication
D) Enable AWS CloudTrail
C) Enable Multi-Factor Authentication
Which service can identify the user that made the API call when an Amazon Elastic Compute
Cloud
(Amazon EC2) instance is terminated?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS X-Ray
D) AWS Identity and Access Management (AWS IAM)
B) AWS CloudTrail
Which service would you use to send alerts based on Amazon CloudWatch alarms?
A) Amazon Simple Notification Service (Amazon SNS)
B) AWS CloudTrail
C) AWS Trusted Advisor
D) Amazon Route 53
A) Amazon Simple Notification Service (Amazon SNS)
Where can a customer find information about prohibited actions on AWS infrastructure?
A) AWS Trusted Advisor
2
