[UPDATED Apr-2026] Best Value Available Preparation Guide for Cloud-Deployment-and-Operations Exam [Q21-Q43]

NO.21 (A company has deployed an application to AWS and a standby instance to its on-premises data center. The on-premises infrastructure is a scaled-down version of the AWS infrastructure. Which routing policy in Route
53 will allow the company to send 75% of the load to AWS and the remaining 25% to its on-premises infrastructure?)

NO.22 (Which two languages are used by CloudFormation to define infrastructure? Choose 2 answers.)

NO.23 (Which two solutions are supported by CloudWatch? Choose 2 answers.)

NO.24 (An administrator needs to troubleshoot a connectivity issue from on-premises computers to public IP addresses assigned to EC2 instances. The administrator suspects the cause to be a network security group.
Which VPC feature should be used to troubleshoot the issue?)

NO.25 (What should be configured in Systems Manager to set the error threshold for automation documents?)

NO.26 (A company is using CloudWatch on its EC2 instances. The company needs to determine the number of bytes received by an instance on all network interfaces for proper sizing of the instance. Which metric should the company use?)

NO.27 (An administrator sees the following VPC flow log: 2 123456739010 eni-123bfecad12529 192.168.20.1
203.0.113.66 2066 22 20 7782 1645859356 1645859536 ACCEPT OK. What does the log indicate about the traffic flow?)

NO.28 (How are custom metrics grouped in CloudWatch?)

NO.29 (What is used to change stacks across multiple accounts and Regions in a single operation?)

NO.30 (Which feature should be configured to deploy a static website to AWS?)

NO.31 (Which performance optimization method must be used when uploading files larger than 5 GB to S3?)

NO.32 (What is a patch baseline attached to if it is not defined in Patch Manager?)

NO.33 (Which solution sends DNS queries to separate AWS compute instances?)

NO.34 (A company is using Route 53 for Domain Name System (DNS) hosting. The company requires a zone that should only be accessible from instances in a Virtual Private Cloud (VPC). Which type of hosted zone should be used?)

NO.35 (Which two protocols are supported in security group rules? Choose 2 answers.)

NO.36 (A company uses SQS and EC2 to convert videos uploaded by users. In the evenings, videos take several hours to convert when they normally take minutes. The user base is expected to grow a hundredfold in the next 12 months. Which solution should be used to reduce the conversion delays?)

NO.37 (A company manages a containerized application by manually deploying AWS compute instances. Which solution should be used to optimize the cost of the application?)

NO.38 (An administrator needs to deploy a NAT gateway in an existing VPC subnet. Which two tasks should this administrator perform during deployment? Choose 2 answers.)

NO.39 (An administrator is unable to make an AMI public. What is the cause?)

NO.40 (An administrator sets up a route table with the default outbound route via an internet gateway and links it to a VPC. Which solution should be used to ensure the route takes effect?)

NO.41 (Which action must be used to create a metric filter in the Amazon CloudWatch console?)

NO.42 (Which type of support plan provides a technical account manager and full use of Trusted Advisor?)

NO.43 (What can AWS Config directly invoke to cause remediation of findings?)