Month End Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free AWS Certified CloudOps Engineer - Associate Practice Questions

Exams4sure Dumps

Exam style questions across every SOA-C03 domain

Last Update 1 day ago
Total Questions : 219

Start with our free SOA-C03 practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real AWS Certified Associate exam. Each SOA-C03 exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Amazon Web Services weak domains, see where you're losing marks, and build a focused study plan in minutes.

SOA-C03 PDF

SOA-C03 PDF (Printable)
$46.5
$154.99

SOA-C03 Testing Engine

SOA-C03 PDF (Printable)
$51
$169.99

SOA-C03 PDF + Testing Engine

SOA-C03 PDF (Printable)
$63.9
$212.99
Question # 1

A company runs applications that generate log files. The company stores the log files in Amazon S3. A CloudOps engineer must automatically process the log files whenever new files upload to the S3 bucket.

Which solution will meet this requirement?

Options:

A.  

Configure an Amazon CloudWatch event rule that triggers on S3 PUT events and invokes an AWS Lambda function.

B.  

Create a pipeline in AWS CodePipeline with a source stage that monitors the S3 bucket for new files and invokes an AWS Lambda function.

C.  

Configure an S3 event notification to invoke an AWS Lambda function to process the new log files.

D.  

Create an AWS Step Functions state machine with a wait state that monitors the S3 bucket for new files and invokes an AWS Lambda function.

Discussion 0
Question # 2

A CloudOps engineer launches an Amazon EC2 Linux instance in a public subnet. When the instance is running, the CloudOps engineer obtains the public IP address and attempts to remotely connect to the instance multiple times. However, the CloudOps engineer always receives a timeout error.

Which action will allow the CloudOps engineer to remotely connect to the instance?

Options:

A.  

Add a route table entry in the public subnet for the CloudOps engineer’s IP address.

B.  

Add an outbound network ACL rule to allow TCP port 22 for the CloudOps engineer’s IP address.

C.  

Modify the instance security group to allow inbound SSH traffic from the CloudOps engineer’s IP address.

D.  

Modify the instance security group to allow outbound SSH traffic to the CloudOps engineer’s IP address.

Discussion 0
Question # 3

A company hosts a production MySQL database on an Amazon Aurora single-node DB cluster. The database is queried heavily for reporting purposes. The DB cluster is experiencing periods of performance degradation because of high CPU utilization and maximum connections errors. A CloudOps engineer needs to improve the stability of the database.

Which solution will meet these requirements?

Options:

A.  

Create an Aurora Replica node. Create an Auto Scaling policy to scale replicas based on CPU utilization. Ensure that all reporting requests use the read-only connection string.

B.  

Create a second Aurora MySQL single-node DB cluster in a second Availability Zone. Ensure that all reporting requests use the connection string for this additional node.

C.  

Create an AWS Lambda function that caches reporting requests. Ensure that all reporting requests call the Lambda function.

D.  

Create a multi-node Amazon ElastiCache cluster. Ensure that all reporting requests use the ElastiCache cluster. Use the database if the data is not in the cache.

Discussion 0
Question # 4

A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A CloudOps engineer needs to keep the instances and all of the instances ' data, even if someone deletes the stack.

Which solution will meet these requirements?

Options:

A.  

Set the DeletionPolicy attribute to Snapshot for the EC2 instance resource in the CloudFormation template.

B.  

Automate backups by using Amazon Data Lifecycle Manager (Amazon DLM).

C.  

Create a backup plan in AWS Backup.

D.  

Set the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template.

Discussion 0
Question # 5

A SysOps administrator is configuring an Auto Scaling group of Amazon EC2 instances for an application. The average CPU utilization of the instances in the Auto Scaling group must remain at approximately 40% when the load on the application changes.

Which solution will meet this requirement in the MOST operationally efficient manner?

Options:

A.  

Create a scheduled scaling action. Configure the action to run at times when the application typically experiences an increase in traffic.

B.  

Configure a simple scaling policy. Create an Amazon CloudWatch alarm that enters ALARM state when CPU utilization is greater than 40%. Associate the alarm with the scaling policy.

C.  

Configure a step scaling policy. Create an Amazon CloudWatch alarm that enters ALARM state when CPU utilization is greater than 40%. Associate the alarm with the scaling policy.

D.  

Configure a target tracking scaling policy. Specify a target value of 40 for average CPU utilization.

Discussion 0
Question # 6

A company made a configuration change to an Amazon EC2 Auto Scaling group that hosts a production application. The change affected the number of available EC2 instances and caused the application to be slow to respond. The company needs a solution to provide an email notification when a management change occurs to the Auto Scaling group. The company has already set up a trail in AWS CloudTrail to log management write changes. A CloudOps engineer creates an Amazon SNS topic that has the appropriate subscribers.

What should the CloudOps engineer do next to meet this requirement?

Options:

A.  

Use AWS Config to monitor the trail for changes to the Auto Scaling group. Configure AWS Config to publish a message to the SNS topic when a change is detected.

B.  

Use AWS Security Hub to monitor the trail for changes to the Auto Scaling group. Configure Security Hub to publish a message to the SNS topic when a change is detected.

C.  

Create an Amazon EventBridge rule to run in response to CloudTrail management write events that involve the Auto Scaling group. Configure the EventBridge rule to publish a message to the SNS topic when a change is detected.

D.  

Store all CloudTrail management events in an Amazon S3 bucket. Use S3 Event Notifications to publish a message to the SNS topic when a change to the Auto Scaling group is detected.

Discussion 0
Question # 7

A CloudOps engineer is creating two AWS CloudFormation templates. The first template will create a VPC with associated resources, such as subnets, route tables, and an internet gateway. The second template will deploy application resources within the VPC that was created by the first template. The second template should refer to the resources created by the first template.

How can this be accomplished with the LEAST amount of administrative effort?

Options:

A.  

Add an export field to the outputs of the first template and import the values in the second template.

B.  

Create a custom resource that queries the stack created by the first template and retrieves the required values.

C.  

Create a mapping in the first template that is referenced by the second template.

D.  

Input the names of resources in the first template and refer to those names in the second template as a parameter.

Discussion 0
Question # 8

A company uses AWS CloudFormation stacks to manage its infrastructure. The company’s developers commit infrastructure changes to the company’s Git repository. The company wants to automate updates to the CloudFormation stacks when developers commit changes. The company requires change set generation before deployment and notification of pending changes for approval. The solution must also minimize infrastructure maintenance overhead.

Which solution will meet these requirements?

Options:

A.  

Create a pipeline in AWS CodePipeline with GitHub as the source provider. Configure a CloudFormation deploy action to create change sets. Use Amazon SNS to send approval notifications.

B.  

Use CloudFormation Git sync to automatically deploy changes when developers push commits to the repository. Configure Amazon EventBridge to trigger an Amazon SNS notification after each deployment is complete.

C.  

Create an AWS Lambda function that creates the CloudFormation change sets, runs the change sets, and waits for approval. Set up an Amazon EventBridge rule to invoke the Lambda function when developers commit code to the Git repository.

D.  

Use AWS Systems Manager Automation to scan the Git repository for changes. Create a change set and deploy the CloudFormation stack.

Discussion 0
Question # 9

A CloudOps engineer is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The application generates write-intensive traffic with variable and sudden increases in client connections.

Which solution should the CloudOps engineer choose to meet these requirements?

Options:

A.  

Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys. Use RDS Proxy.

B.  

Configure AWS KMS to rotate keys. Use RDS read replicas.

C.  

Configure AWS Secrets Manager to rotate credentials. Use RDS Proxy.

D.  

Configure AWS Secrets Manager to rotate credentials. Use RDS read replicas.

Discussion 0
Question # 10

A company ' s CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs.

What could be blocking the VPC flow logs from being published to CloudWatch Logs?

Options:

A.  

The IAM policy attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.

B.  

The IAM policy attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.

C.  

The VPC is configured for IPv6 addresses.

D.  

The VPC is peered with another VPC in the AWS account.

Discussion 0

Free Exams Sample Questions