WGU D319 – AWS Cloud Architecture
Final Prep Exam (Latest Update
2026/2027) Questions and Verified
Answers | 100% Correct | Grade A.
1. A solutions architect needs to design a highly available web
application running on Amazon EC2 instances. Which AWS service
should be placed in front of the instances to distribute incoming
traffic?
A. Amazon CloudFront
B. Amazon Route 53
C. Elastic Load Balancing (ELB)
D. AWS Direct Connect
Rationale: Elastic Load Balancing (ELB) automatically distributes
incoming application traffic across multiple EC2 instances in one or
more Availability Zones. This improves fault tolerance, scalability, and
application availability by ensuring no single instance becomes
overloaded.
2. Which AWS service provides temporary, limited-privilege
credentials for AWS resources?
,A. Amazon Cognito
B. AWS Organizations
C. AWS Directory Service
D. AWS Identity and Access Management (IAM) Roles
Rationale: IAM Roles provide temporary security credentials that
applications, AWS services, or users can assume. These credentials
automatically rotate and eliminate the need for long-term access keys,
making them a security best practice.
3. Which AWS storage service is designed for object storage with
virtually unlimited scalability?
A. Amazon EBS
B. Amazon FSx
C. AWS Storage Gateway
D. Amazon S3
Rationale: Amazon S3 is an object storage service that offers industry-
leading durability, high availability, and virtually unlimited scalability. It
is commonly used for backups, static websites, data lakes, and
application storage.
4. Which AWS service allows infrastructure to be defined and
deployed using templates?
A. AWS Systems Manager
B. AWS Config
,C. AWS CloudFormation
D. AWS Trusted Advisor
Rationale: AWS CloudFormation enables Infrastructure as Code (IaC),
allowing architects to define AWS resources in JSON or YAML templates
for automated, repeatable deployments.
5. An architect wants compute resources that automatically scale
based on incoming requests without managing servers. Which
service is most appropriate?
A. Amazon EC2
B. Amazon ECS on EC2
C. AWS Batch
D. AWS Lambda
Rationale: AWS Lambda is a serverless compute service that
automatically provisions and scales infrastructure in response to events.
Users pay only for execution time rather than idle infrastructure.
6. Which AWS database service is a fully managed relational
database?
A. Amazon DynamoDB
B. Amazon Neptune
C. Amazon DocumentDB
D. Amazon RDS
, Rationale: Amazon RDS supports multiple relational database engines
including MySQL, PostgreSQL, MariaDB, SQL Server, Oracle, and Aurora
while handling backups, patching, and maintenance.
7. Which Amazon EC2 purchasing option provides the greatest
discount for interruptible workloads?
A. Reserved Instances
B. Dedicated Hosts
C. On-Demand Instances
D. Spot Instances
Rationale: Spot Instances allow customers to use unused EC2 capacity at
substantial discounts. Because AWS can reclaim these instances with
little notice, they are ideal for fault-tolerant workloads.
8. Which AWS service helps protect web applications from common
exploits such as SQL injection and cross-site scripting?
A. AWS Shield Standard
B. Amazon GuardDuty
C. AWS Firewall Manager
D. AWS WAF
Rationale: AWS WAF filters HTTP requests and protects applications
from common web attacks including SQL injection, XSS, and malicious
bots using customizable security rules.
9. Which AWS service provides DNS management?
Final Prep Exam (Latest Update
2026/2027) Questions and Verified
Answers | 100% Correct | Grade A.
1. A solutions architect needs to design a highly available web
application running on Amazon EC2 instances. Which AWS service
should be placed in front of the instances to distribute incoming
traffic?
A. Amazon CloudFront
B. Amazon Route 53
C. Elastic Load Balancing (ELB)
D. AWS Direct Connect
Rationale: Elastic Load Balancing (ELB) automatically distributes
incoming application traffic across multiple EC2 instances in one or
more Availability Zones. This improves fault tolerance, scalability, and
application availability by ensuring no single instance becomes
overloaded.
2. Which AWS service provides temporary, limited-privilege
credentials for AWS resources?
,A. Amazon Cognito
B. AWS Organizations
C. AWS Directory Service
D. AWS Identity and Access Management (IAM) Roles
Rationale: IAM Roles provide temporary security credentials that
applications, AWS services, or users can assume. These credentials
automatically rotate and eliminate the need for long-term access keys,
making them a security best practice.
3. Which AWS storage service is designed for object storage with
virtually unlimited scalability?
A. Amazon EBS
B. Amazon FSx
C. AWS Storage Gateway
D. Amazon S3
Rationale: Amazon S3 is an object storage service that offers industry-
leading durability, high availability, and virtually unlimited scalability. It
is commonly used for backups, static websites, data lakes, and
application storage.
4. Which AWS service allows infrastructure to be defined and
deployed using templates?
A. AWS Systems Manager
B. AWS Config
,C. AWS CloudFormation
D. AWS Trusted Advisor
Rationale: AWS CloudFormation enables Infrastructure as Code (IaC),
allowing architects to define AWS resources in JSON or YAML templates
for automated, repeatable deployments.
5. An architect wants compute resources that automatically scale
based on incoming requests without managing servers. Which
service is most appropriate?
A. Amazon EC2
B. Amazon ECS on EC2
C. AWS Batch
D. AWS Lambda
Rationale: AWS Lambda is a serverless compute service that
automatically provisions and scales infrastructure in response to events.
Users pay only for execution time rather than idle infrastructure.
6. Which AWS database service is a fully managed relational
database?
A. Amazon DynamoDB
B. Amazon Neptune
C. Amazon DocumentDB
D. Amazon RDS
, Rationale: Amazon RDS supports multiple relational database engines
including MySQL, PostgreSQL, MariaDB, SQL Server, Oracle, and Aurora
while handling backups, patching, and maintenance.
7. Which Amazon EC2 purchasing option provides the greatest
discount for interruptible workloads?
A. Reserved Instances
B. Dedicated Hosts
C. On-Demand Instances
D. Spot Instances
Rationale: Spot Instances allow customers to use unused EC2 capacity at
substantial discounts. Because AWS can reclaim these instances with
little notice, they are ideal for fault-tolerant workloads.
8. Which AWS service helps protect web applications from common
exploits such as SQL injection and cross-site scripting?
A. AWS Shield Standard
B. Amazon GuardDuty
C. AWS Firewall Manager
D. AWS WAF
Rationale: AWS WAF filters HTTP requests and protects applications
from common web attacks including SQL injection, XSS, and malicious
bots using customizable security rules.
9. Which AWS service provides DNS management?
