Page |1
WGU D282 CLOUD FOUNDATIONS – FINAL
EXAM V2 | STUDY GUIDE | LATEST UPDATE
2026/2027 | PRACTICE QUESTIONS AND
ANSWERS | EXAM REVIEW.
TABLE OF CONTENTS
1. Cloud Concepts and Value Proposition
2. Cloud Economics and Total Cost of Ownership
3. Cloud Architecture and Design Principles
4. AWS Global Infrastructure
5. Cloud Security and the Shared Responsibility Model
6. Identity and Access Management (IAM)
7. Security and Compliance Services
8. Compute Services: EC2, Lambda, and Containers
9. Storage Services: S3, EBS, and EFS
10. Database Services: RDS, DynamoDB, and Redshift
11. Networking and Content Delivery: VPC, CloudFront, and Route 53
12. Management and Governance Services
13. Billing, Pricing, and Support Plans
14. Cloud Deployment Models and Migration Strategies
, Page |2
Question 1: A device manufacturing company is planning to move its workload to the
cloud. The company is looking for a cloud provider that will provide networking,
storage, servers, and virtualization while the company's developers and IT
departments focus on managing the operating systems, runtime, data, and business
applications. Which cloud computing model meets this requirement?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Correct Answer: C) Infrastructure as a Service (IaaS)
IaaS provides virtualized computing resources such as networking, storage, servers,
and virtualization, while the customer manages the operating systems, runtime, data,
and applications. This model gives the company the most control over the software
stack while the provider manages the physical infrastructure. SaaS would manage
the entire application, and PaaS would manage the runtime and operating system as
well.
Question 2: A solutions architect is guiding a startup software development company
on how to access the broad array of services offered by AWS. Which access method
provides packages that allow developers to access AWS in a variety of popular
programming languages and makes it easy to use AWS in their existing
applications?
A) AWS Management Console
B) AWS Command Line Interface (CLI)
C) AWS Software Development Kits (SDKs)
D) AWS CloudFormation
Correct Answer: C) AWS Software Development Kits (SDKs)
AWS SDKs provide language-specific APIs that allow developers to
programmatically interact with AWS services from their existing applications. They
are available for popular languages including Python, Java, JavaScript, and .NET.
, Page |3
The AWS CLI and Management Console are not language-specific programmatic
interfaces.
Question 3: A cloud consultant is working for a medium-sized retail company
planning to migrate its workload to the AWS cloud. The company has identified all
the cloud products and services that will be needed for the first phase of its
migration, but it is having problems calculating the costs of the AWS infrastructure.
Which service would help the company estimate the cost of its use case before the
migration?
A) AWS Cost Explorer
B) AWS Pricing Calculator
C) AWS Budgets
D) AWS Trusted Advisor
Correct Answer: B) AWS Pricing Calculator
The AWS Pricing Calculator allows users to create estimates for their AWS
architecture costs before deployment. It provides a web-based interface for
configuring services and estimating monthly costs. AWS Cost Explorer is used for
analyzing existing costs, and AWS Budgets is for setting spending limits.
Question 4: Media Production Inc. (MPI) is one of the thousands of companies that
has achieved a lower variable cost in the last two years by ditching its data centers
for cloud computing. Cloud service providers such as AWS were able to lower MPI's
pay-as-you-go prices by aggregating its subscribers' usage. Which advantage of
cloud computing is MPI benefitting from?
A) Trade capital expense for variable expense
B) Benefit from massive economies of scale
C) Stop guessing capacity
D) Increase speed and agility
Correct Answer: B) Benefit from massive economies of scale
, Page |4
Massive economies of scale mean that AWS aggregates usage from hundreds of
thousands of customers, which translates into lower pay-as-you-go prices. Because
AWS can achieve higher economies of scale, the savings are passed on to
customers. This is distinct from trading capital expense for variable expense, which
refers to the payment model rather than the cost savings from aggregation.
Question 5: A data analytics company working with sensitive and confidential data is
using AWS Organizations to centrally manage multiple AWS accounts. How can the
company ensure that provisioned accounts stay in the company's access control
guidelines?
A) Use a service control policy (SCP) to define the maximum available permissions
for all the AWS accounts
B) Use an IAM policy to define the maximum available permissions for all the AWS
accounts
C) Use an AWS Config rule to enforce access control guidelines
D) Use a security group to restrict access to all AWS accounts
Correct Answer: A) Use a service control policy (SCP) to define the maximum
available permissions for all the AWS accounts
Service control policies (SCPs) are a feature of AWS Organizations that allow you to
define the maximum available permissions for all accounts in an organization. They
ensure that accounts stay within the organization's access control guidelines. IAM
policies are account-specific, AWS Config rules evaluate compliance but do not
enforce permissions, and security groups control network traffic rather than account
permissions.
Question 6: What can be used to allow an application running on an Amazon EC2
instance to securely store data in an Amazon S3 bucket without using long-term
credentials?
A) IAM user access key
B) IAM role
WGU D282 CLOUD FOUNDATIONS – FINAL
EXAM V2 | STUDY GUIDE | LATEST UPDATE
2026/2027 | PRACTICE QUESTIONS AND
ANSWERS | EXAM REVIEW.
TABLE OF CONTENTS
1. Cloud Concepts and Value Proposition
2. Cloud Economics and Total Cost of Ownership
3. Cloud Architecture and Design Principles
4. AWS Global Infrastructure
5. Cloud Security and the Shared Responsibility Model
6. Identity and Access Management (IAM)
7. Security and Compliance Services
8. Compute Services: EC2, Lambda, and Containers
9. Storage Services: S3, EBS, and EFS
10. Database Services: RDS, DynamoDB, and Redshift
11. Networking and Content Delivery: VPC, CloudFront, and Route 53
12. Management and Governance Services
13. Billing, Pricing, and Support Plans
14. Cloud Deployment Models and Migration Strategies
, Page |2
Question 1: A device manufacturing company is planning to move its workload to the
cloud. The company is looking for a cloud provider that will provide networking,
storage, servers, and virtualization while the company's developers and IT
departments focus on managing the operating systems, runtime, data, and business
applications. Which cloud computing model meets this requirement?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Correct Answer: C) Infrastructure as a Service (IaaS)
IaaS provides virtualized computing resources such as networking, storage, servers,
and virtualization, while the customer manages the operating systems, runtime, data,
and applications. This model gives the company the most control over the software
stack while the provider manages the physical infrastructure. SaaS would manage
the entire application, and PaaS would manage the runtime and operating system as
well.
Question 2: A solutions architect is guiding a startup software development company
on how to access the broad array of services offered by AWS. Which access method
provides packages that allow developers to access AWS in a variety of popular
programming languages and makes it easy to use AWS in their existing
applications?
A) AWS Management Console
B) AWS Command Line Interface (CLI)
C) AWS Software Development Kits (SDKs)
D) AWS CloudFormation
Correct Answer: C) AWS Software Development Kits (SDKs)
AWS SDKs provide language-specific APIs that allow developers to
programmatically interact with AWS services from their existing applications. They
are available for popular languages including Python, Java, JavaScript, and .NET.
, Page |3
The AWS CLI and Management Console are not language-specific programmatic
interfaces.
Question 3: A cloud consultant is working for a medium-sized retail company
planning to migrate its workload to the AWS cloud. The company has identified all
the cloud products and services that will be needed for the first phase of its
migration, but it is having problems calculating the costs of the AWS infrastructure.
Which service would help the company estimate the cost of its use case before the
migration?
A) AWS Cost Explorer
B) AWS Pricing Calculator
C) AWS Budgets
D) AWS Trusted Advisor
Correct Answer: B) AWS Pricing Calculator
The AWS Pricing Calculator allows users to create estimates for their AWS
architecture costs before deployment. It provides a web-based interface for
configuring services and estimating monthly costs. AWS Cost Explorer is used for
analyzing existing costs, and AWS Budgets is for setting spending limits.
Question 4: Media Production Inc. (MPI) is one of the thousands of companies that
has achieved a lower variable cost in the last two years by ditching its data centers
for cloud computing. Cloud service providers such as AWS were able to lower MPI's
pay-as-you-go prices by aggregating its subscribers' usage. Which advantage of
cloud computing is MPI benefitting from?
A) Trade capital expense for variable expense
B) Benefit from massive economies of scale
C) Stop guessing capacity
D) Increase speed and agility
Correct Answer: B) Benefit from massive economies of scale
, Page |4
Massive economies of scale mean that AWS aggregates usage from hundreds of
thousands of customers, which translates into lower pay-as-you-go prices. Because
AWS can achieve higher economies of scale, the savings are passed on to
customers. This is distinct from trading capital expense for variable expense, which
refers to the payment model rather than the cost savings from aggregation.
Question 5: A data analytics company working with sensitive and confidential data is
using AWS Organizations to centrally manage multiple AWS accounts. How can the
company ensure that provisioned accounts stay in the company's access control
guidelines?
A) Use a service control policy (SCP) to define the maximum available permissions
for all the AWS accounts
B) Use an IAM policy to define the maximum available permissions for all the AWS
accounts
C) Use an AWS Config rule to enforce access control guidelines
D) Use a security group to restrict access to all AWS accounts
Correct Answer: A) Use a service control policy (SCP) to define the maximum
available permissions for all the AWS accounts
Service control policies (SCPs) are a feature of AWS Organizations that allow you to
define the maximum available permissions for all accounts in an organization. They
ensure that accounts stay within the organization's access control guidelines. IAM
policies are account-specific, AWS Config rules evaluate compliance but do not
enforce permissions, and security groups control network traffic rather than account
permissions.
Question 6: What can be used to allow an application running on an Amazon EC2
instance to securely store data in an Amazon S3 bucket without using long-term
credentials?
A) IAM user access key
B) IAM role
