WGU D319 OA AWS CLOUD

pg. 1

WGU D319 OA AWS CLOUD

ARCHITECTURE VERSION 1 LATEST 2025

WITH 250 REAL EXAM PREP QUESTIONS

AND CORRECT ANSWERS/ WGU D319

OBJECTIVE ASSESSMENT 2025 (NEW!)

Which type of customer-managed keys in Key Management Service (KMS) should be used?

• Symmetric keys with custom key store
• Symmetric keys with service's key material
• Asymmetric keys for encryption and decryption
• Asymmetric keys for signing and verifying

A An organization is evaluating the options to protect data in the cloud and has the

following requirements:

Cryptographic secrets need to be hosted in a single-tenant service.The organization needs to manage the root of trust.

What should this organization use store to the secrets?

• AWS Parameter Store
• AWS CloudHSM cluster
• AWS EBS-encrypted volume
• AWS KMS-managed keys

B Which solution provides a customer-managed root of trust?

• AWS Directory Service
• AWS Key Management Service 1 / 4

pg. 2

• AWS Certificate Manager
• AWS CloudHSM

D Which tool reduces time and costs by allowing a customer to automate the creation and track the changes of entire resource environments?

• Systems Manager
• CloudFront
• Machine Images
• CloudFormation

D A client wants to implement redundant network access to EC2 instances with automatic failover in case the existing AWS Direct Connect connection fails. The solution must minimize cost.

Which network access option should this client use?

• Virtual Private Cloud
• Site-to-Site VPN
• NAT gateway instance
• Internet gateway instance

B A client has 100 on-premises locations in the northwestern United States. Each location has network access to the same Amazon VPCs in the US West AWS Region via Internet Protocol Security (IPSec) tunnels. The client plans to create 500 Amazon VPCs in the same Region. The client needs to ensure all Amazon VPCs will be accessible from each of its on-premises locations. The solution must minimize cost of on-premises infrastructure.

Which additional network access method should this client include in the solution?

• AWS Direct Connect
• AWS Site-to-Site VPN 2 / 4

pg. 3

• AWS VPN CloudHub
• AWS Transit Gateway

D A company plans to host a public website in AWS. Users will access the website using SSL/TLS. The company requires the ability to delete keys if they are compromised.

Which key solution should this company use?

• Customer-managed asymmetric key
• Customer-managed symmetric key
• AWS-managed asymmetric key
• AWS-managed symmetric key

A A company is building a high-performance computing (HPC) clustered workload on AWS using EC2 instances and is looking for a fully managed, shared storage solution for this workload. Once the HPC portion of the data processing is complete, the company would like to serve the resulting data directly on the internet.

Which Amazon service would be the most cost-effective solution for these requirements?

• FSx for Lustre
• Elastic File System (EFS)
• Elastic Block Store (EBS)
• FSx for Windows

A Which Amazon storage class monitors data usage and moves data to the most cost- effective location?

• S3 Standard
• S3 Standard-IA 3 / 4

pg. 4

• One Zone-IA
• S3 Intelligent-Tiering

D An organization needs a low-cost system to host its website.

Which elastic compute configuration meets the requirement at the least cost?

• A general purpose instance with a hard disk drive
• A storage-optimized instance with a hard disk drive
• A general purpose instance with a provisioned input/output intensive solid-state

drive

• A storage-optimized instance with a provisioned input/output intensive solid-

state drive A A development team needs a system to run recurring benchmark tests for an artificial intelligence application. To remove variability from one test to the other, the storage will be reinitialized for each test.

Which elastic compute configuration meets the requirements while minimizing cost and administration time?

• A memory-optimized computing instance with a standard solid-state drive
• An accelerated computing instance with a standard solid-state drive
• A memory-optimized computing instance with an instance store
• An accelerated computing instance with an instance store

D A client wants to use a managed service to replace an EC2 instance that currently hosts a shared big data analytics store, accessible via the NFS protocol. The managed service must provide read-after-write consistency and low latency for read and write operations.

Which Amazon service should this client choose?

• S3
• / 4