D282 WGU Cloud
Foundations with
correct answers 2025
AWS Well-Architected Framework - CORRECT ANSWER-Perform operations as code
Make frequent, small, reversible changes
Refine operations procedures frequently
Anticipate failure
Learn from all operational failures
Amazon Macie - CORRECT ANSWER-Amazon Macie is a fully managed data security and data privacy
service that uses machine learning and pattern matching to discover and protect your sensitive data in
AWS. Amazon Macie automates the discovery of sensitive data at scale and lowers the cost of protecting
your data.
Amazon Detective - CORRECT ANSWER-visually Analyze dqata and automatically processes terabytes of
event data records about IP traffic, AWS management operations, and malicious or unauthorized
activity.
,Amazon Detective - CORRECT ANSWER-Automatically processes terabytes of event data records about
IP traffic, AWS management operations, and malicious or unauthorized activity.
AWS Policy Generator - CORRECT ANSWER-A tool that enables you to create policies that control access
to Amazon Web Services (AWS) products and resources.
AWS Cloud Development Kit - CORRECT ANSWER-An open source software development framework to
define cloud application resources using familiar programming languages. With AWS CDK you can stick
to using programming languages that are familiar to you and have infrastructure deployed using AWS
CloudFormation.
AWS CodeCommit - CORRECT ANSWER-Is a fully-managed source control service that hosts secure Git-
based repositories. It makes it easy for teams to collaborate on code in a secure and highly scalable
ecosystem.
AWS CodeGuru - CORRECT ANSWER-CodeGuru is used to review code and provide intelligent
recommendations for improvement.
Virtual Private Cloud (VPC) - CORRECT ANSWER-Is a secure, isolated private cloud hosted within a public
cloud environment, allowing users to have a dedicated section of the cloud with full control over their
virtual networking environment, including IP addresses, subnets, and routing tables. This setup enables
businesses to run sensitive applications and workloads with enhanced security and compliance, similar
to an on-premises data center but with the scalability and flexibility of the public cloud.
Amazon Kinesis - CORRECT ANSWER-Used for real-time streaming data and can technically be used to
build a real-time analytics solution, has its own streaming data solution.
Amazon Redshift - CORRECT ANSWER-This is a data warehousing service designed to work with business
intelligence tools for analytical reporting.
Amazon SQS - CORRECT ANSWER-This is a message queue service used to decouple the components of a
cloud application.
, Amazon MSK - CORRECT ANSWER-Managed Streaming for Kafka is a fully managed service that
facilitates building and running applications built on Apache Kafka without having to manage the
underlying infrastructure. It would allow the financial services firm to focus on building their analytics
platform without being concerned about Kafka's infrastructure management, hence reducing the
operational overhead.
Amazon Aurora - CORRECT ANSWER-Is a relational database that is compatible with MySQL and
PostgreSQL database engines. Aurora is extremely fast and scales up to 128 TB. You can also deploy
replicas for read scaling within and across Regions. Aurora also offers automated backups.
Amazon DocumentDB - CORRECT ANSWER-NoSQL database that supports document data structures.
Convertible Reserved Instances - CORRECT ANSWER-A convertible reserved instance enables you to
exchange one or more Convertible Reserved Instances for another Convertible Reserved Instance with a
different configuration, including instance family, operating system, and tenancy.
Standard Reserved Instances - CORRECT ANSWER-With standard RIs you cannot change the instance
type but you can change the instance size.
Regional Reserved Instances - CORRECT ANSWER-Regional RIs apply to instance usage within any AZ in a
specified Region.
Zonal Reserved Instances - CORRECT ANSWER-Zonal RIs apply to instance usage within a specific AZ
within an AWS Region.
AWS Data Exchange - CORRECT ANSWER-This service allows customers to find, subscribe to, and use
third-party data in the cloud. Companies can subscribe to a diverse selection of data products provided
by various data providers.
AWS Glue - CORRECT ANSWER-Fully managed extract, transform, and load (ETL) service that makes it
easy to prepare and load data for analytics. While AWS Glue can work with data, it does not primarily
facilitate the subscription to third-party data sources as described in the scenario.
Foundations with
correct answers 2025
AWS Well-Architected Framework - CORRECT ANSWER-Perform operations as code
Make frequent, small, reversible changes
Refine operations procedures frequently
Anticipate failure
Learn from all operational failures
Amazon Macie - CORRECT ANSWER-Amazon Macie is a fully managed data security and data privacy
service that uses machine learning and pattern matching to discover and protect your sensitive data in
AWS. Amazon Macie automates the discovery of sensitive data at scale and lowers the cost of protecting
your data.
Amazon Detective - CORRECT ANSWER-visually Analyze dqata and automatically processes terabytes of
event data records about IP traffic, AWS management operations, and malicious or unauthorized
activity.
,Amazon Detective - CORRECT ANSWER-Automatically processes terabytes of event data records about
IP traffic, AWS management operations, and malicious or unauthorized activity.
AWS Policy Generator - CORRECT ANSWER-A tool that enables you to create policies that control access
to Amazon Web Services (AWS) products and resources.
AWS Cloud Development Kit - CORRECT ANSWER-An open source software development framework to
define cloud application resources using familiar programming languages. With AWS CDK you can stick
to using programming languages that are familiar to you and have infrastructure deployed using AWS
CloudFormation.
AWS CodeCommit - CORRECT ANSWER-Is a fully-managed source control service that hosts secure Git-
based repositories. It makes it easy for teams to collaborate on code in a secure and highly scalable
ecosystem.
AWS CodeGuru - CORRECT ANSWER-CodeGuru is used to review code and provide intelligent
recommendations for improvement.
Virtual Private Cloud (VPC) - CORRECT ANSWER-Is a secure, isolated private cloud hosted within a public
cloud environment, allowing users to have a dedicated section of the cloud with full control over their
virtual networking environment, including IP addresses, subnets, and routing tables. This setup enables
businesses to run sensitive applications and workloads with enhanced security and compliance, similar
to an on-premises data center but with the scalability and flexibility of the public cloud.
Amazon Kinesis - CORRECT ANSWER-Used for real-time streaming data and can technically be used to
build a real-time analytics solution, has its own streaming data solution.
Amazon Redshift - CORRECT ANSWER-This is a data warehousing service designed to work with business
intelligence tools for analytical reporting.
Amazon SQS - CORRECT ANSWER-This is a message queue service used to decouple the components of a
cloud application.
, Amazon MSK - CORRECT ANSWER-Managed Streaming for Kafka is a fully managed service that
facilitates building and running applications built on Apache Kafka without having to manage the
underlying infrastructure. It would allow the financial services firm to focus on building their analytics
platform without being concerned about Kafka's infrastructure management, hence reducing the
operational overhead.
Amazon Aurora - CORRECT ANSWER-Is a relational database that is compatible with MySQL and
PostgreSQL database engines. Aurora is extremely fast and scales up to 128 TB. You can also deploy
replicas for read scaling within and across Regions. Aurora also offers automated backups.
Amazon DocumentDB - CORRECT ANSWER-NoSQL database that supports document data structures.
Convertible Reserved Instances - CORRECT ANSWER-A convertible reserved instance enables you to
exchange one or more Convertible Reserved Instances for another Convertible Reserved Instance with a
different configuration, including instance family, operating system, and tenancy.
Standard Reserved Instances - CORRECT ANSWER-With standard RIs you cannot change the instance
type but you can change the instance size.
Regional Reserved Instances - CORRECT ANSWER-Regional RIs apply to instance usage within any AZ in a
specified Region.
Zonal Reserved Instances - CORRECT ANSWER-Zonal RIs apply to instance usage within a specific AZ
within an AWS Region.
AWS Data Exchange - CORRECT ANSWER-This service allows customers to find, subscribe to, and use
third-party data in the cloud. Companies can subscribe to a diverse selection of data products provided
by various data providers.
AWS Glue - CORRECT ANSWER-Fully managed extract, transform, and load (ETL) service that makes it
easy to prepare and load data for analytics. While AWS Glue can work with data, it does not primarily
facilitate the subscription to third-party data sources as described in the scenario.
