Pre-Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

SOA-C03 AWS Certified CloudOps Engineer - Associate is now Stable and With Pass Result | Test Your Knowledge for Free

Exams4sure Dumps

SOA-C03 Practice Questions

AWS Certified CloudOps Engineer - Associate

Last Update 16 hours ago
Total Questions : 219

Dive into our fully updated and stable SOA-C03 practice test platform, featuring all the latest AWS Certified Associate exam questions added this week. Our preparation tool is more than just a Amazon Web Services study aid; it's a strategic advantage.

Our free AWS Certified Associate practice questions crafted to reflect the domains and difficulty of the actual exam. The detailed rationales explain the 'why' behind each answer, reinforcing key concepts about SOA-C03. Use this test to pinpoint which areas you need to focus your study on.

SOA-C03 PDF

SOA-C03 PDF (Printable)
$43.75
$124.99

SOA-C03 Testing Engine

SOA-C03 PDF (Printable)
$50.75
$144.99

SOA-C03 PDF + Testing Engine

SOA-C03 PDF (Printable)
$63.7
$181.99
Question # 1

A company runs applications that generate log files. The company stores the log files in Amazon S3. A CloudOps engineer must automatically process the log files whenever new files upload to the S3 bucket.

Which solution will meet this requirement?

Options:

A.  

Configure an Amazon CloudWatch event rule that triggers on S3 PUT events and invokes an AWS Lambda function.

B.  

Create a pipeline in AWS CodePipeline with a source stage that monitors the S3 bucket for new files and invokes an AWS Lambda function.

C.  

Configure an S3 event notification to invoke an AWS Lambda function to process the new log files.

D.  

Create an AWS Step Functions state machine with a wait state that monitors the S3 bucket for new files and invokes an AWS Lambda function.

Discussion 0
Question # 2

A CloudOps engineer launches an Amazon EC2 Linux instance in a public subnet. When the instance is running, the CloudOps engineer obtains the public IP address and attempts to remotely connect to the instance multiple times. However, the CloudOps engineer always receives a timeout error.

Which action will allow the CloudOps engineer to remotely connect to the instance?

Options:

A.  

Add a route table entry in the public subnet for the CloudOps engineer’s IP address.

B.  

Add an outbound network ACL rule to allow TCP port 22 for the CloudOps engineer’s IP address.

C.  

Modify the instance security group to allow inbound SSH traffic from the CloudOps engineer’s IP address.

D.  

Modify the instance security group to allow outbound SSH traffic to the CloudOps engineer’s IP address.

Discussion 0
Question # 3

A company hosts a production MySQL database on an Amazon Aurora single-node DB cluster. The database is queried heavily for reporting purposes. The DB cluster is experiencing periods of performance degradation because of high CPU utilization and maximum connections errors. A CloudOps engineer needs to improve the stability of the database.

Which solution will meet these requirements?

Options:

A.  

Create an Aurora Replica node. Create an Auto Scaling policy to scale replicas based on CPU utilization. Ensure that all reporting requests use the read-only connection string.

B.  

Create a second Aurora MySQL single-node DB cluster in a second Availability Zone. Ensure that all reporting requests use the connection string for this additional node.

C.  

Create an AWS Lambda function that caches reporting requests. Ensure that all reporting requests call the Lambda function.

D.  

Create a multi-node Amazon ElastiCache cluster. Ensure that all reporting requests use the ElastiCache cluster. Use the database if the data is not in the cache.

Discussion 0
Question # 4

A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A CloudOps engineer needs to keep the instances and all of the instances ' data, even if someone deletes the stack.

Which solution will meet these requirements?

Options:

A.  

Set the DeletionPolicy attribute to Snapshot for the EC2 instance resource in the CloudFormation template.

B.  

Automate backups by using Amazon Data Lifecycle Manager (Amazon DLM).

C.  

Create a backup plan in AWS Backup.

D.  

Set the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template.

Discussion 0
Question # 5

A SysOps administrator is configuring an Auto Scaling group of Amazon EC2 instances for an application. The average CPU utilization of the instances in the Auto Scaling group must remain at approximately 40% when the load on the application changes.

Which solution will meet this requirement in the MOST operationally efficient manner?

Options:

A.  

Create a scheduled scaling action. Configure the action to run at times when the application typically experiences an increase in traffic.

B.  

Configure a simple scaling policy. Create an Amazon CloudWatch alarm that enters ALARM state when CPU utilization is greater than 40%. Associate the alarm with the scaling policy.

C.  

Configure a step scaling policy. Create an Amazon CloudWatch alarm that enters ALARM state when CPU utilization is greater than 40%. Associate the alarm with the scaling policy.

D.  

Configure a target tracking scaling policy. Specify a target value of 40 for average CPU utilization.

Discussion 0
Question # 6

A company made a configuration change to an Amazon EC2 Auto Scaling group that hosts a production application. The change affected the number of available EC2 instances and caused the application to be slow to respond. The company needs a solution to provide an email notification when a management change occurs to the Auto Scaling group. The company has already set up a trail in AWS CloudTrail to log management write changes. A CloudOps engineer creates an Amazon SNS topic that has the appropriate subscribers.

What should the CloudOps engineer do next to meet this requirement?

Options:

A.  

Use AWS Config to monitor the trail for changes to the Auto Scaling group. Configure AWS Config to publish a message to the SNS topic when a change is detected.

B.  

Use AWS Security Hub to monitor the trail for changes to the Auto Scaling group. Configure Security Hub to publish a message to the SNS topic when a change is detected.

C.  

Create an Amazon EventBridge rule to run in response to CloudTrail management write events that involve the Auto Scaling group. Configure the EventBridge rule to publish a message to the SNS topic when a change is detected.

D.  

Store all CloudTrail management events in an Amazon S3 bucket. Use S3 Event Notifications to publish a message to the SNS topic when a change to the Auto Scaling group is detected.

Discussion 0
Question # 7

A CloudOps engineer is creating two AWS CloudFormation templates. The first template will create a VPC with associated resources, such as subnets, route tables, and an internet gateway. The second template will deploy application resources within the VPC that was created by the first template. The second template should refer to the resources created by the first template.

How can this be accomplished with the LEAST amount of administrative effort?

Options:

A.  

Add an export field to the outputs of the first template and import the values in the second template.

B.  

Create a custom resource that queries the stack created by the first template and retrieves the required values.

C.  

Create a mapping in the first template that is referenced by the second template.

D.  

Input the names of resources in the first template and refer to those names in the second template as a parameter.

Discussion 0
Question # 8

A company uses AWS CloudFormation stacks to manage its infrastructure. The company’s developers commit infrastructure changes to the company’s Git repository. The company wants to automate updates to the CloudFormation stacks when developers commit changes. The company requires change set generation before deployment and notification of pending changes for approval. The solution must also minimize infrastructure maintenance overhead.

Which solution will meet these requirements?

Options:

A.  

Create a pipeline in AWS CodePipeline with GitHub as the source provider. Configure a CloudFormation deploy action to create change sets. Use Amazon SNS to send approval notifications.

B.  

Use CloudFormation Git sync to automatically deploy changes when developers push commits to the repository. Configure Amazon EventBridge to trigger an Amazon SNS notification after each deployment is complete.

C.  

Create an AWS Lambda function that creates the CloudFormation change sets, runs the change sets, and waits for approval. Set up an Amazon EventBridge rule to invoke the Lambda function when developers commit code to the Git repository.

D.  

Use AWS Systems Manager Automation to scan the Git repository for changes. Create a change set and deploy the CloudFormation stack.

Discussion 0
Question # 9

A CloudOps engineer is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The application generates write-intensive traffic with variable and sudden increases in client connections.

Which solution should the CloudOps engineer choose to meet these requirements?

Options:

A.  

Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys. Use RDS Proxy.

B.  

Configure AWS KMS to rotate keys. Use RDS read replicas.

C.  

Configure AWS Secrets Manager to rotate credentials. Use RDS Proxy.

D.  

Configure AWS Secrets Manager to rotate credentials. Use RDS read replicas.

Discussion 0
Question # 10

A company ' s CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs.

What could be blocking the VPC flow logs from being published to CloudWatch Logs?

Options:

A.  

The IAM policy attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.

B.  

The IAM policy attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.

C.  

The VPC is configured for IPv6 addresses.

D.  

The VPC is peered with another VPC in the AWS account.

Discussion 0
Get SOA-C03 dumps and pass your exam in 24 hours!

Free Exams Sample Questions