Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

SOA-C03 AWS Certified CloudOps Engineer - Associate is now Stable and With Pass Result | Test Your Knowledge for Free

SOA-C03 Practice Questions

AWS Certified CloudOps Engineer - Associate

Last Update 1 day ago
Total Questions : 165

Dive into our fully updated and stable SOA-C03 practice test platform, featuring all the latest AWS Certified Associate exam questions added this week. Our preparation tool is more than just a Amazon Web Services study aid; it's a strategic advantage.

Our free AWS Certified Associate practice questions crafted to reflect the domains and difficulty of the actual exam. The detailed rationales explain the 'why' behind each answer, reinforcing key concepts about SOA-C03. Use this test to pinpoint which areas you need to focus your study on.

SOA-C03 PDF

SOA-C03 PDF (Printable)
$43.75
$124.99

SOA-C03 Testing Engine

SOA-C03 PDF (Printable)
$50.75
$144.99

SOA-C03 PDF + Testing Engine

SOA-C03 PDF (Printable)
$63.7
$181.99
Question # 1

A company runs applications on Amazon EC2 instances. The company wants to ensure that SSH ports on the EC2 instances are never open. The company has enabled AWS Config and has set up the restricted-ssh AWS managed rule.

A CloudOps engineer must implement a solution to remediate SSH port access for noncompliant security groups.

What should the engineer do to meet this requirement with the MOST operational efficiency?

Options:

A.  

Configure the AWS Config rule to identify noncompliant security groups. Configure the rule to use the AWS-PublishSNSNotification AWS Systems Manager Automation runbook to send notifications about noncompliant resources.

B.  

Configure the AWS Config rule to identify noncompliant security groups. Configure the rule to use the AWS-DisableIncomingSSHOnPort22 AWS Systems Manager Automation runbook to remediate noncompliant resources.

C.  

Make an AWS Config API call to search for noncompliant security groups. Disable SSH access for noncompliant security groups by using a Deny rule.

D.  

Configure the AWS Config rule to identify noncompliant security groups. Manually update each noncompliant security group to remove the Allow rule.

Discussion 0
Question # 2

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX).

Which backup solution will meet these requirements?

Options:

A.  

Configure the backup software to use Amazon S3 as the target for the data backups.

B.  

Configure the backup software to use Amazon S3 Glacier Flexible Retrieval as the target for the data backups.

C.  

Use AWS Storage Gateway, and configure it to use gateway-cached volumes.

D.  

Use AWS Storage Gateway, and configure it to use gateway-stored volumes.

Discussion 0
Question # 3

A CloudOps engineer is preparing to deploy an application to Amazon EC2 instances that are in an Auto Scaling group. The application requires dependencies to be installed. Application updates are issued weekly.

The CloudOps engineer needs to implement a solution to incorporate the application updates on a regular basis. The solution also must conduct a vulnerability scan during Amazon Machine Image (AMI) creation.

What is the MOST operationally efficient solution that meets these requirements?

Options:

A.  

Create a script that uses Packer and schedule a cron job.

B.  

Install the application and dependencies on an EC2 instance and create an AMI.

C.  

Use EC2 Image Builder with a custom recipe to install the application and dependencies.

D.  

Invoke the EC2 CreateImage API operation by using an EventBridge scheduled rule.

Discussion 0
Question # 4

A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.

Which combination of actions should a CloudOps engineer take to resolve this problem? (Select TWO.)

Options:

A.  

Change to the least outstanding requests algorithm on the ALB target group.

B.  

Configure cookie forwarding in the CloudFront distribution cache behavior.

C.  

Configure header forwarding in the CloudFront distribution cache behavior.

D.  

Enable group-level stickiness on the ALB listener rule.

E.  

Enable sticky sessions on the ALB target group.

Discussion 0
Question # 5

A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWS account in the company, managed by a different CloudOps engineer.

Which action can the CloudOps engineer in the second account perform?

Options:

A.  

Add a product from the imported portfolio to a local portfolio.

B.  

Add new products to the imported portfolio.

C.  

Change the launch role for the products contained in the imported portfolio.

D.  

Customize the products in the imported portfolio.

Discussion 0
Question # 6

A CloudOps engineer configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings. The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The CloudOps engineer notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds.

How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?

Options:

A.  

The Auto Scaling group will launch an additional EC2 instance every time the RequestCountPerTarget metric exceeds the predefined limit.

B.  

The Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance.

C.  

The Auto Scaling group will send an alert to the ALB to rebalance the traffic and not add new EC2 instances until the load is normalized.

D.  

The Auto Scaling group will try to distribute the traffic among all EC2 instances before launching another instance.

Discussion 0
Question # 7

A company uses an organization in AWS Organizations to manage multiple AWS accounts. The company needs to send specific events from all the accounts in the organization to a new receiver account, where an AWS Lambda function will process the events.

A CloudOps engineer configures Amazon EventBridge to route events to a target event bus in the us-west-2 Region in the receiver account. The CloudOps engineer creates rules in both the sender and receiver accounts that match the specified events. The rules do not specify an account parameter in the event pattern. IAM roles are created in the sender accounts to allow PutEvents actions on the target event bus.

However, the first test events from the us-east-1 Region are not processed by the Lambda function in the receiving account.

What is the likely reason the events are not processed?

Options:

A.  

Interface VPC endpoints for EventBridge are required in the sender accounts and receiver accounts.

B.  

The target Lambda function is in a different AWS Region, which is not supported by EventBridge.

C.  

The resource-based policy on the target event bus must be modified to allow PutEvents API calls from the sender accounts.

D.  

The rule in the receiving account must specify {"account": ["sender-account-id"]} in its event pattern and must include the receiving account I

D.  

Discussion 0
Question # 8

A company runs an application on Amazon EC2 instances in an Auto Scaling group. Scale-out actions take a long time because of long-running boot scripts. The CloudOps engineer must reduce scale-out time without overprovisioning.

Which solution will meet these requirements?

Options:

A.  

Change the launch configuration to use a larger instance size.

B.  

Increase the minimum number of instances in the Auto Scaling group.

C.  

Add a predictive scaling policy to the Auto Scaling group.

D.  

Add a warm pool to the Auto Scaling group.

Discussion 0
Question # 9

A company uses default settings to create an AWS Lambda function. The function needs to access an Amazon RDS database that is in a private subnet of a VP

C.  

The function has the correct IAM permissions to access the database. The private subnet has appropriate routing configurations and is accessible from within the VP

C.  

However, the Lambda function is unable to connect to the RDS instance.

What is the likely reason the Lambda function cannot connect to the RDS instance?

Options:

A.  

The company did not set the RDS instance as the destination for the Lambda function in the function configuration.

B.  

The Lambda function configuration did not deploy the function in the same VPC that contains the RDS instance.

C.  

The VPC where the Lambda function is deployed is not peered with the VPC where the RDS instance is deployed.

D.  

The security group for the Lambda function does not allow outbound access to the RDS instance.

Discussion 0
Question # 10

A CloudOps engineer needs to ensure that AWS resources across multiple AWS accounts are tagged consistently. The company uses an organization in AWS Organizations to centrally manage the accounts. The company wants to implement cost allocation tags to accurately track the costs that are allocated to each business unit.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

A.  

Use Organizations tag policies to enforce mandatory tagging on all resources. Enable cost allocation tags in the AWS Billing and Cost Management console.

B.  

Configure AWS CloudTrail events to invoke an AWS Lambda function to detect untagged resources and to automatically assign tags based on predefined rules.

C.  

Use AWS Config to evaluate tagging compliance. Use AWS Budgets to apply tags for cost allocation.

D.  

Use AWS Service Catalog to provision only pre-tagged resources. Use AWS Trusted Advisor to enforce tagging across the organization.

Discussion 0
Get SOA-C03 dumps and pass your exam in 24 hours!

Free Exams Sample Questions