Free AWS Certified CloudOps Engineer - Associate Practice Questions

Exam style questions across every SOA-C03 domain

Last Update 1 day ago
Total Questions : 219

Start with our free SOA-C03 practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real AWS Certified Associate exam. Each SOA-C03 exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Amazon Web Services weak domains, see where you're losing marks, and build a focused study plan in minutes.

SOA-C03 PDF

$46.5
~~$154.99~~

Add to Cart

SOA-C03 Testing Engine

$51
~~$169.99~~

Add to Cart

SOA-C03 PDF + Testing Engine

$63.9
~~$212.99~~

Add to Cart

Question # 21

A CloudOps engineer is troubleshooting an implementation of Amazon CloudWatch Synthetics. The CloudWatch Synthetics results must be sent to an Amazon S3 bucket.

The CloudOps engineer has copied the configuration of an existing canary that runs on a VPC that has an internet gateway attached. However, the CloudOps engineer cannot get the canary to successfully start on a private VPC that has no internet access.

What should the CloudOps engineer do to successfully run the canary on the private VPC?

Options:

Ensure that the DNS resolution option and the DNS hostnames option are turned on in the VP

Add the synthetics:GetCanaryRuns permission to the VP

On the S3 bucket, add the IgnorePublicAcls permission to the CloudWatch Synthetics role.

Ensure that the DNS resolution option and the DNS hostnames option are turned off in the VP

Create a gateway VPC endpoint for Amazon S3. Add the permissions to allow CloudWatch Synthetics to use the S3 endpoint.

Ensure that the DNS resolution option and the DNS hostnames option are turned off in the VP

Add a security group to the canary to allow outbound traffic on the DNS port. Add the permissions to allow CloudWatch Synthetics to write to the S3 bucket.

Ensure that the DNS resolution option and the DNS hostnames option are turned on in the VP

Create an interface VPC endpoint for CloudWatch. Create a gateway VPC endpoint for Amazon S3. Add the permissions to allow CloudWatch Synthetics to use both endpoints.

Discussion 0

Question # 22

A company recently acquired another corporation and all of that corporation’s AWS accounts. A financial analyst needs the cost data from these accounts. A CloudOps engineer uses Cost Explorer to generate cost and usage reports. The CloudOps engineer notices that “No Tagkey” represents 20% of the monthly cost.

What should the CloudOps engineer do to tag the “No Tagkey” resources?

Options:

Add the accounts to AWS Organizations. Use a service control policy (SCP) to tag all the untagged resources.

Use an AWS Config rule to find the untagged resources. Set the remediation action to terminate the resources.

Use Cost Explorer to find and tag all the untagged resources.

Use Tag Editor to find and tag all the untagged resources.

Discussion 0

Question # 23

A CloudOps engineer has successfully deployed a VPC with an AWS CloudFormation template. The CloudOps engineer wants to deploy the same template across multiple accounts that are managed through AWS Organizations.

Which solution will meet this requirement with the LEAST operational overhead?

Options:

Assume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.

Create an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.

Create an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.

Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.

Discussion 0

Question # 24

A global gaming company is preparing to launch a new game on AWS. The game runs in multiple AWS Regions on a fleet of Amazon EC2 instances. The instances are in an Auto Scaling group behind an Application Load Balancer (ALB) in each Region. The company plans to use Amazon Route 53 for DNS services. The DNS configuration must direct users to the Region that is closest to them and must provide automated failover.

Which combination of steps should a CloudOps engineer take to configure Route 53 to meet these requirements? (Select TWO.)

Options:

Create Amazon CloudWatch alarms that monitor the health of the ALB in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms.

Create Amazon CloudWatch alarms that monitor the health of the EC2 instances in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms.

Configure Route 53 DNS failover by using a health check that monitors the private IP address of an EC2 instance in each Region.

Configure Route 53 geoproximity routing. Specify the Regions that are used for the infrastructure.

Configure Route 53 simple routing. Specify the continent, country, and state or province that are used for the infrastructure.

Discussion 0

Question # 25

A company runs a critical application by using Amazon DynamoD

During a recent deployment, the application accidentally wrote incorrect data to a DynamoDB table. The table has point-in-time recovery (PITR) enabled with continuous backups. DynamoDB Streams is enabled on the table. The company’s recovery point objective (RPO) is 2 minutes.

A CloudOps engineer must restore the table to its state from 2 minutes before the corruption occurred.

Which solution will meet these requirements?

Options:

Use PITR to restore the table to 2 minutes before the incorrect data was written. Update the existing table in place.

Create a new table by using PITR to restore the table from 2 minutes before the corruption occurred. Update the application to reference the new table.

Restore the most recent on-demand snapshot. Use DynamoDB Streams to replay all transactions since the snapshot was taken.

Use DynamoDB Streams to replay the table’s change events in reverse order to undo the writing of the incorrect data.

Discussion 0

Question # 26

A company must retain all Amazon S3 objects for 90 days for compliance reasons. Additionally, the company must retain all changes to objects for 90 days. Therefore, the company enables S3 Versioning on the bucket. The company does not delete S3 objects even after the retention period ends. The company notices that S3 costs are increasing. The company wants to reduce storage costs.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

Write an AWS Lambda function that checks S3 object version age. Create a delete marker for any object older than 90 days.

Set an S3 Lifecycle rule to automatically delete S3 object versions older than 90 days.

Use AWS Backup to migrate objects out of the S3 bucket after 90 days.

Use Amazon EventBridge to watch for S3 object creation events. Schedule an AWS Lambda function to run in 90 days to delete the object.

Discussion 0

Question # 27

A financial services company stores customer images in an Amazon S3 bucket in the us-east-1 Region. To comply with regulations, the company must ensure that all existing objects are replicated to an S3 bucket in a second AWS Region. If an object replication fails, the company must be able to retry replication for the object.

What solution will meet these requirements?

Options:

Configure Amazon S3 Cross-Region Replication (CRR). Use Amazon S3 live replication to replicate existing objects.

Configure Amazon S3 Cross-Region Replication (CRR). Use S3 Batch Replication to replicate existing objects.

Configure Amazon S3 Cross-Region Replication (CRR). Use S3 Replication Time Control (S3 RTC) to replicate existing objects.

Use S3 Lifecycle rules to move objects to the destination bucket in a second Region.

Discussion 0

Question # 28

A finance company uses AWS Secrets Manager to store Amazon RDS credentials that are periodically rotated. A database team must receive a notification when the credentials are rotated to ensure compliance with security policies. The database team creates an Amazon Simple Notification Service (Amazon SNS) topic for the notifications.

Which solution will meet these requirements?

Options:

Create an Amazon EventBridge rule to match AWS CloudTrail events for the RotateSecret API call with a RotationSucceeded result. Configure the rule to route matching events to the SNS topic.

Enable notifications for secret rotation in AWS Secrets Manager. Configure Secrets Manager to publish notifications to the SNS topic when secrets are rotated.

Use Amazon EventBridge to filter Amazon CloudWatch Logs for RotationSucceeded events. Route notifications for all matches to the SNS topic.

Use Amazon CloudWatch Logs to filter for RotationSucceeded events. Route notifications for all matches to the SNS topic.

Discussion 0

Question # 29

A company uses an Amazon Simple Queue Service (Amazon SQS) queue and Amazon EC2 instances in an Auto Scaling group with target tracking for a web application. The company collects the ASGAverageNetworkIn metric but notices that instances do not scale fast enough during peak traffic. There are a large number of SQS messages accumulating in the queue.

A CloudOps engineer must reduce the number of SQS messages during peak periods.

Which solution will meet this requirement?

Options:

Define and use a new custom Amazon CloudWatch metric based on the SQS ApproximateNumberOfMessagesDelayed metric in the target tracking policy.

Define and use Amazon CloudWatch metric math to calculate the SQS queue backlog for each instance in the target tracking policy.

Define and use step scaling by specifying a ChangeInCapacity value for the EC2 instances.

Define and use simple scaling by specifying a ChangeInCapacity value for the EC2 instances.

Discussion 0

Question # 30

A CloudOps engineer created a VPC with a private subnet, a security group allowing all outbound traffic, and an endpoint for EC2 Instance Connect in the private subnet. The EC2 instance was launched without an SSH key pair, using the same subnet and security group. However, the engineer cannot connect via EC2 Instance Connect endpoint.

How can the CloudOps engineer connect to the instance?

Options:

Create an inbound rule in the security group to allow HTTPS traffic on port 443 from the private subnet.

Create an inbound rule in the security group to allow SSH traffic on port 22 from the private subnet.

Create an IAM instance profile that allows AWS Systems Manager Session Manager to access the EC2 instance. Associate the instance profile with the instance.

Recreate the EC2 instance. Associate an SSH key pair with the instance.

Discussion 0

Month End Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free AWS Certified CloudOps Engineer - Associate Practice Questions

Exam style questions across every SOA-C03 domain

SOA-C03 PDF

SOA-C03 Testing Engine

SOA-C03 PDF + Testing Engine

Options:

Options:

Options:

Options:

Answer:

Explanation:

Options:

Options:

Options:

Options:

Options:

Options:

Free Exams Sample Questions

We Accept

Secure Site

Customer Review

Money Back Guarantee