SOA-C03 Exam Questions
172 real SOA-C03 exam questions with expert-verified answers and explanations. Page 1 of 4.
- Question #1Monitoring, Logging, and Remediation
A medical research company uses an Amazon Bedrock powered AI assistant with agents and knowledge bases to provide physicians quick access to medical study protocols. The company ne...
CloudTrailBedrock audit logginggenerative AIAPI event logging - Question #2Security and Compliance
A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts. A CloudOps engineer must implement a solution to identify and remediate all DynamoDB...
AWS ConfigDynamoDB taggingcompliance remediationmanaged rules - Question #3Networking and Content Delivery
A company's website runs on an Amazon EC2 Linux instance. The website needs to serve PDF files from an Amazon S3 bucket. All public access to the S3 bucket is blocked at the accoun...
CloudFrontorigin access controlS3 private bucketcontent delivery - Question #4Reliability and Business Continuity
A financial services company stores customer images in an Amazon S3 bucket in the us-east-1 Region. To comply with regulations, the company must ensure that all existing objects ar...
S3 Cross-Region ReplicationS3 Batch Replicationexisting objectsdata replication - Question #5Networking and Content Delivery
A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet....
NAT gatewayprivate subnetVPC routinginternet access - Question #6Monitoring, Logging, and Remediation
A company's architecture team must receive immediate email notifications whenever new Amazon EC2 instances are launched in the company's main AWS production account. What should a...
SNSEventBridgeEC2 launch notificationsemail alerts - Question #7Reliability and Business Continuity
A company runs an application on Amazon EC2 that connects to an Amazon Aurora PostgreSQL database. A developer accidentally drops a table from the database, causing application err...
Aurora point-in-time recoveryBacktrackdatabase restoretable recovery - Question #8Reliability and business continuity
A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A CloudOps engineer needs to roll back the DB clus...
Aurora BacktrackingDatabase recoveryPoint-in-time recoveryAurora data protection - Question #9Monitoring, Logging, and Remediation
An application runs on Amazon EC2 instances that are in an Auto Scaling group. A CloudOps engineer needs to implement a solution that provides a central storage location for errors...
CloudWatch agentcentralized loggingCloudWatch LogsAuto Scaling log aggregation - Question #10Security and Compliance
A company's security policy prohibits connecting to Amazon EC2 instances through SSH and RDP. Instead, staff must use AWS Systems Manager Session Manager. Users report they cannot...
Session ManagerSSM agentIAM instance profileAmazonSSMManagedInstanceCore - Question #11Security and compliance
A company deploys an application on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The company wants to protect the application from SQL i...
SQL Injection ProtectionAWS WAFApplication SecurityALB Integration - Question #12Monitoring, logging, and remediation
An AWS Lambda function is intermittently failing several times a day. A CloudOps engineer must find out how often this error occurred in the last 7 days. Which action will meet thi...
CloudWatch Logs InsightsLambda monitoringlog queryingoperational efficiency - Question #13Security and compliance
A company is storing backups in an Amazon S3 bucket. These backups must not be deleted for at least 3 months after creation. What should the CloudOps engineer do?
S3 Object Lockcompliance modedata retentionbackup protection - Question #14Deployment, provisioning, and automation
A company's Amazon EC2 instance with high CPU utilization is a t3.large instance running a test web app. The company determines the app would run better on a compute-optimized larg...
EC2 instance typecompute-optimizedinstance resizeinstance lifecycle - Question #15Monitoring, logging, and remediation
A company's CloudOps engineer monitors multiple AWS accounts in an organization and checks each account's AWS Health Dashboard. After adding 10 new accounts, the engineer wants to...
AWS Healthorganizational viewmulti-accounthealth dashboard - Question #16Security and compliance
A company that uses AWS Organizations recently implemented AWS Control Tower. The company now needs to centralize identity management. A CloudOps engineer must federate AWS IAM Ide...
IAM Identity CenterSAML 2.0 federationSSOX.509 certificate - Question #17Security and compliance
A company hosts an FTP server on EC2 instances. AWS Security Hub sends findings to Amazon EventBridge when the FTP port becomes publicly exposed in attached security groups. A Clou...
EventBridgeLambda remediationSecurity Hub findingssecurity group automation - Question #18Reliability and business continuity
A company has an application running on EC2 that stores data in an Amazon RDS for MySQL Single- AZ DB instance. The application requires both read and write operations, and the com...
RDS Multi-AZDatabase High AvailabilityFailoverRelational Databases - Question #19Deployment, provisioning, and automation
A company has an AWS CloudFormation template that includes an AWS::EC2::Instance resource and a custom resource (Lambda function). The Lambda function fails because it runs before...
CloudFormation DependsOncustom resourceresource orderingLambda - Question #20Cost and performance optimization
A company uses an Amazon Simple Queue Service (Amazon SQS) queue and Amazon EC2 instances in an Auto Scaling group with target tracking for a web application. The company collects...
SQS backlog metricCloudWatch metric mathAuto Scalingbacklog per instance - Question #21Deployment, provisioning, and automation
A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWS account in the company, managed by a different CloudOps engineer. Which action can...
Service Catalogportfolio sharingcross-accountimported portfolio - Question #22Networking
A company is migrating a legacy application to AWS. The application runs on EC2 instances across multiple Availability Zones behind an Application Load Balancer (ALB). The target g...
ALB routing algorithmsticky sessionsleast outstanding requestsweighted random - Question #23Security and compliance
A CloudOps engineer must manage the security of an AWS account. Recently, an IAM user's access key was mistakenly uploaded to a public code repository. The engineer must identify e...
CloudTrailcompromised access keyincident responseIAM forensics - Question #24Networking
A company runs custom statistical analysis software on a cluster of Amazon EC2 instances. The software is highly sensitive to network latency between nodes, although network throug...
cluster placement groupEC2 low latencyHPC networkinginstance proximity - Question #25Security and compliance
A company is using AWS CloudTrail and wants to ensure that SysOps administrators can easily verify that the log files have not been deleted or changed. Which action should a SysOps...
CloudTrail log integritylog file validationaudittamper detection - Question #26Monitoring, logging, and remediation
A company runs several production workloads on Amazon EC2 instances. A SysOps administrator discovered that a production EC2 instance failed a system health check. The SysOps admin...
CloudWatch alarmEC2 auto recoverysystem health checkSNS notification - Question #27Cost and performance optimization
A company has an application that uses Amazon ElastiCache for Memcached to cache query responses to improve latency. However, the application's users are reporting slow response ti...
ElastiCache ScalingMemcached EvictionsCaching PerformanceCloudWatch Metrics - Question #28Reliability and business continuity
A company's ecommerce application is running on Amazon EC2 instances that are behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. Customers repor...
ELB health checksAuto Scaling health check typeALBHTTP 500 recovery - Question #29Reliability and business continuity
A company hosts a critical legacy application on two Amazon EC2 instances that are in one Availability Zone. The instances run behind an Application Load Balancer (ALB). The compan...
High AvailabilityAuto ScalingFault ToleranceLaunch Templates - Question #30Monitoring, logging, and remediation
A CloudOps engineer wants to configure observability of specific metrics for a public website that runs on Amazon Elastic Kubernetes Service (Amazon EKS). The CloudOps engineer wan...
CloudWatch Application SignalsSLO SLIEKS observabilitymetrics logs traces correlation - Question #31Security and compliance
A company runs an application that logs user data to an Amazon CloudWatch Logs log group. The company discovers that personal information the application has logged is visible in p...
CloudWatch data protection policyPII redactionlog maskingsensitive data - Question #32Security and compliance
A multinational company uses an organization in AWS Organizations to manage over 200 member accounts across multiple AWS Regions. The company must ensure that all AWS resources mee...
AWS Control TowerService Control Policies (SCPs)Multi-account ManagementSecurity Governance - Question #33Deployment, provisioning, and automation
A company uses AWS Organizations to create and manage many AWS accounts. The company wants to deploy new IAM roles in each account. Which action should the SysOps administrator tak...
CloudFormation StackSetsmulti-account deploymentIAM rolesAWS Organizations - Question #34Cost and performance optimization
A company runs an application on an Amazon EC2 instance. The application uses a MySQL database. The EC2 instance has a General Purpose SSD (gp3) Amazon EBS volume attached. The com...
EBS fast snapshot restoreFSRvolume initializationEBS performance - Question #35Networking
Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with t...
VPC flow logsnetwork ACL outboundNLB troubleshootingACCEPT REJECT records - Question #36Deployment, provisioning, and automation
A company runs a website on Amazon EC2 instances. Users can upload images to an Amazon S3 bucket and publish the images to the website. The company wants to deploy a serverless ima...
S3 Event NotificationsLambda triggersserverlessevent-driven architecture - Question #37Cost and performance optimization
A company hosts a production MySQL database on an Amazon Aurora single-node DB cluster. The database is queried heavily for reporting purposes. The DB cluster is experiencing perio...
Aurora Read ReplicasDatabase ScalingPerformance OptimizationHigh CPU Utilization - Question #38Reliability and business continuity
A CloudOps engineer configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default setti...
Auto Scalingcooldown periodRequestCountPerTargetALB - Question #39Deployment, provisioning, and automation
A CloudOps engineer needs to build an event infrastructure for custom application-specific events. The events must be sent to an AWS Lambda function for processing. The CloudOps en...
EventBridgecustom event busevent archiveevent replay - Question #40Deployment, provisioning, and automation
An AWS CloudFormation template creates an Amazon RDS instance. This template is used to build up development environments as needed and then delete the stack when the environment i...
CloudFormationdeletion policyRDS snapshotstack lifecycle - Question #41Networking
A company has a VPC that contains a public subnet and a private subnet. The company deploys an Amazon EC2 instance that uses an Amazon Linux Amazon Machine Image (AMI) and has the...
EC2 Instance Connect endpointprivate subnetSSH accesssecurity groups - Question #42Reliability and business continuity
A global company runs a critical primary workload in the us-east-1 Region. The company wants to ensure business continuity with minimal downtime in case of a workload failure. The...
disaster recoveryactive-active architectureRTORPO - Question #43Cost and performance optimization
A CloudOps engineer is using AWS Compute Optimizer to generate recommendations for a fleet of Amazon EC2 instances. Some of the instances use newly released instance types, while o...
Compute OptimizerEC2 instance typesright-sizing recommendations - Question #44Security and compliance
A company uses an organization in AWS Organizations to manage multiple AWS accounts. The company needs to send specific events from all the accounts in the organization to a new re...
EventBridgecross-account eventsresource-based policyPutEvents - Question #45Monitoring, logging, and remediation
A company hosts a web application on an Amazon EC2 instance. Users report that the web application is occasionally unresponsive. Amazon CloudWatch metrics indicate that the CPU uti...
CloudWatch alarmCPU utilizationEC2 monitoring - Question #46Networking
A company runs an application on a large fleet of Amazon EC2 instances to process financial transactions. The EC2 instances share data by using an Amazon Elastic File System (Amazo...
EFS mount targetsecurity groupNFSAvailability Zone - Question #47Reliability and business continuity
The company uses AWS Organizations to manage its accounts. For the production account, a SysOps administrator must ensure that all data is backed up daily for all current and futur...
AWS Backupbackup planresource tagsEC2 EFS - Question #48Networking
A company needs to ensure that an AWS Lambda function can access resources in a VPC in the company's account. The Lambda function requires access to third-party APIs that can be ac...
Lambda VPCNAT gatewayprivate subnetinternet access - Question #49Security and compliance
A company uses AWS Organizations to manage multiple AWS accounts. A CloudOps engineer must identify all IPv4 ports open to 0.0.0.0/0 across the organization's accounts. Which solut...
Trusted Advisorsecurity groupsopen portsorganizational view - Question #50Cost and performance optimization
A company hosts a static website in an Amazon S3 bucket, accessed globally via Amazon CloudFront. The Cache-Control max-age header is set to 1 hour, and Maximum TTL is set to 5 min...
CloudFront cachingTTL configurationCache-Control headerCDN optimization