SOA-C03 Exam Questions
172 real SOA-C03 exam questions with expert-verified answers and explanations. Page 3 of 4.
- Question #101Reliability and business continuity
A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single A...
Auto Scalinghigh availabilitymulti-AZApplication Load Balancer - Question #102Networking
A CloudOps engineer is creating a simple, public-facing website running on Amazon EC2. The CloudOps engineer created the EC2 instance in an existing public subnet and assigned an E...
network ACLephemeral portsstateless firewalloutbound rules - Question #103Deployment, provisioning, and automation
A company wants to use AWS Systems Manager to manage a large fleet of Amazon EC2 instances. The company hosts the instances in private subnets. The company follows the principle of...
SSM AgentIAM instance profileAmazonSSMManagedInstanceCoreFleet Manager - Question #104Reliability and business continuity
A company has an application that collects notifications from thousands of alarm systems. The notifications include alarm notifications and information notifications. The informati...
SQSmessage prioritizationqueue managementAuto Scaling - Question #105Monitoring, logging, and remediation
A company is implementing security and compliance by using AWS Trusted Advisor. The company's CloudOps team is validating the list of Trusted Advisor checks that it can access. Whi...
Trusted AdvisorAWS Support plansecurity checks - Question #106Deployment, provisioning, and automation
A CloudOps engineer has successfully deployed a VPC with an AWS CloudFormation template The CloudOps engineer wants to deploy the same template across multiple accounts that are ma...
CloudFormation StackSetsmulti-account deploymentAWS Organizations - Question #107Networking
A company's application is hosted by an internet provider at app.example.com. The company manages with Amazon Route 53. Which Route 53 record should be created to address this?
Route 53CNAME recordDNS - Question #108Reliability and business continuity
A company uses Amazon ElastiCache (Redis OSS) to cache application data. A CloudOps engineer must implement a solution to increase the resilience of the cache. The solution also mu...
ElastiCache RedisMulti-AZread replicaRTO - Question #109Monitoring, logging, and remediation
A company has multiple AWS accounts. A CloudOps engineer uses a sandbox account to create and verify IAM policies for use in a production account. The CloudOps engineer uses AWS Cl...
CloudTrailEventBridgeIAM policy monitoringLambda - Question #110Networking
A finance company stores confidential data in an Amazon S3 bucket. The company uses Amazon QuickSight to analyze the data and create dashboard reports. The company requires that al...
VPC endpointQuickSightinterface endpointprivate connectivity - Question #111Reliability and business continuity
A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when syst...
FSx for WindowsMulti-AZSMB protocolWindows ACLs - Question #112Monitoring, logging, and remediation
A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minut...
CloudWatch agentprocstat pluginCPU metricsEC2 - Question #113Monitoring, logging, and remediation
A company needs to monitor its website's availability to end users. The company needs a solution to provide an Amazon Simple Notification Service (Amazon SNS) notification if the w...
CloudWatch Syntheticsheartbeat canaryavailability monitoringSNS - Question #114Networking
A company uses Amazon EC2 Auto Scaling across multiple Availability Zones. The company must ensure that EC2 instances are provisioned in private subnets. The company recently optim...
NAT gatewayVPC route tablesprivate subnetconnectivity - Question #115Deployment, provisioning, and automation
A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A CloudOps engineer needs to keep the instances and all of the instances' data, even if someone...
CloudFormationDeletionPolicyRetainstack deletion - Question #116Deployment, provisioning, and automation
A CloudOps engineer is preparing to deploy an application to Amazon EC2 instances that are in an Auto Scaling group. The application requires dependencies to be installed. Applicat...
EC2 Image BuilderAMI automationvulnerability scanningAuto Scaling - Question #117Networking
A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to mill...
Network Load Balancerstatic IPhigh throughputtraffic distribution - Question #118Networking
A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a sin...
CloudFrontALB sticky sessionscookie forwardingstateful application - Question #119Networking
A global company uses an organization in AWS Organizations to manage multiple AWS accounts. To comply with regulations, the company deploys workload environments to five AWS Region...
Transit gatewaymulti-regionmulti-accountVPC connectivity - Question #120Cost and performance optimization
A company stores critical information in an Amazon RDS for PostgreSQL database. The company notices degraded performance, high CPU utilization, increased query latency, and connect...
RDS Performance InsightsRDS Proxyconnection poolingPostgreSQL - Question #121Reliability and business continuity
A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degra...
Auto Scalingtarget tracking scalingEC2ALB - Question #122Cost and performance optimization
A company's reporting job that used to run in 15 minutes is now taking an hour to run. An application generates the reports. The application runs on Amazon EC2 instances and extrac...
RDS read replicaMySQLRead IOPSreporting performance - Question #123Security and compliance
A company that runs multiple workloads on AWS wants to enhance its security posture by implementing DNS-based threat protection. The company must block DNS-based attacks. Which sol...
Route 53 ResolverDNS Firewallthreat protectionDNS security - Question #124Security and compliance
A CloudOps engineer wants to share a copy of a production database with a migration account. The production database is hosted on an Amazon RDS DB instance and is encrypted at rest...
RDS snapshot sharingKMS key policycross-account accessencryption - Question #125Monitoring, logging, and remediation
A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log...
CloudWatch Logs Insightslog querystats commanderror aggregation - Question #126Monitoring, logging, and remediation
A developer uses an Amazon Linux Amazon Machine Image (AMI) to launch an EC2 instance that hosts a third-party application. The application occasionally becomes unstable. The Cloud...
CloudWatch alarmEC2 reboot actionCPU utilizationSNS notification - Question #127Networking
A company has a microservice that runs on a set of Amazon EC2 instances. The EC2 instances run behind an Application Load Balancer (ALB). A CloudOps engineer must use Amazon Route...
Route 53 alias recordALB DNS mappingDNS record typesCNAME vs alias - Question #128Cost and performance optimization
An application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The application takes up to 2 minutes to populate a local cache after the application is star...
ALB slow starttarget group attributestraffic ramp-upcache warm-up - Question #129Reliability and business continuity
A company runs an application on Amazon EC2 instances. The application stores and retrieves data from an Amazon Aurora PostgreSQL database. A developer accidentally drops a table f...
Aurora point-in-time recoverydatabase restoreaccidental deletionPostgreSQL - Question #130Monitoring, logging, and remediation
A company runs several workloads on AWS. The company identifies five AWS Trusted Advisor service quota metrics to monitor in a specific AWS Region. The company wants to receive ema...
Trusted Advisor service quotasCloudWatch alarmsquota monitoringSNS notification - Question #131Monitoring, logging, and remediation
A CloudOps engineer is troubleshooting an implementation of Amazon CloudWatch Synthetics. The CloudWatch Synthetics results must be sent to an Amazon S3 bucket. The CloudOps engine...
CloudWatch SyntheticsVPC endpointsprivate VPCcanary configuration - Question #132Networking
A company deploys AWS infrastructure in a VPC that has an internet gateway. The VPC has public subnets and private subnets. An Amazon RDS for MySQL DB instance is deployed in a pri...
Lambda VPC networkingSQS VPC endpointNAT gatewayprivate subnet connectivity - Question #133Security and compliance
A company's security policy requires incoming SSH traffic to be restricted to a defined set of addresses. The company is using an AWS Config rule to check whether security groups a...
AWS Config remediationsecurity group SSH rulesautomated remediationcompliance - Question #134Monitoring, logging, and remediation
A CloudOps engineer is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All servi...
ALB access logsCloudFront access logsHTTP status codesLayer 7 logging - Question #135Monitoring, logging, and remediation
An errant process is known to use an entire processor and run at 100%. A CloudOps engineer wants to automate restarting an Amazon EC2 instance when the problem occurs for more than...
CloudWatch alarmEC2 rebootdetailed monitoringCPU utilization - Question #136Security and compliance
A CloudOps engineer wants to provide access to AWS services by attaching an IAM policy to multiple IAM users The CloudOps engineer also wants to be able to change the policy and cr...
IAM user groupscustomer managed policypolicy versioningIAM best practices - Question #137Cost and performance optimization
A company runs an application on Amazon EC2 instances that are in an Amazon EC2 Auto Scaling group. Scale-out actions take a long time to become complete because of long-running bo...
Auto Scaling warm poolscale-out latencyboot scriptsinstance pre-warming - Question #138Networking
A CloudOps engineer creates a new VPC that includes a public subnet and a private subnet. The CloudOps engineer successfully launches 11 Amazon EC2 instances in the private subnet...
VPC subnet CIDRIP address exhaustionsubnet sizingprivate subnet - Question #139Deployment, provisioning, and automation
A CloudOps engineer needs to build an event infrastructure for a set of custom application- specific events. The events must be sent to an AWS Lambda function for processing. The C...
EventBridge custom event busevent archiveevent replayLambda integration - Question #140Deployment, provisioning, and automation
A CloudOps engineer has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The CloudOps engineer attempts to use the template to launch a new sta...
CloudFormation cross-regionAMI region-specificregional service availabilitystack failure - Question #141Reliability and business continuity
To comply with regulations, a SysOps administrator needs to back up an Amazon EC2 Amazon Machine Image (AMI) to an Amazon S3 bucket. If the SysOps administrator restores the AMI fr...
AMI store to S3AMI backupimage ID preservationEC2 Image Builder - Question #142Cost and performance optimization
A company runs a high performance computing (HPC) data-processing application on Amazon EC2 instances in one Availability Zone within a development environment. The application use...
S3 Express One ZoneS3 directory bucketHPC performancelow-latency storage - Question #143Security and compliance
A company has a new security policy that requires all Amazon Elastic Block Store (Amazon EBS) volumes to be encrypted at rest. The company needs to use a custom key policy to manag...
KMSEBS encryptionkey rotationcustomer managed keys - Question #144Cost and performance optimization
A SysOps administrator is configuring an Auto Scaling group of Amazon EC2 instances for an application. The average CPU utilization of the instances in the Auto Scaling group must...
Auto Scalingtarget trackingCPU utilizationCloudWatch - Question #145Deployment, provisioning, and automation
A company runs applications on Amazon EC2 instances. Many of the instances are not patched. The company has a tagging policy. All the instances are tagged with details about the ow...
Patch ManagerSystems ManagerEC2 taggingpatch policy - Question #146Security and compliance
A SysOps administrator needs to implement a solution that protects credentials for an Amazon RDS for MySQL DB instance. The solution must rotate the credentials automatically one t...
Secrets Managercredential rotationRDSLambda - Question #147Security and compliance
A company has a multi-account AWS environment that includes the following: - A central identity account that contains all IAM users and groups - Several member accounts that contai...
IAM rolescross-account accesstrust policySTS AssumeRole - Question #148Deployment, provisioning, and automation
A company is performing deployments of an application at regular intervals. Users report that the application sometimes does not work properly. The company discovers that some user...
CloudFrontcache invalidationTTLdeployment - Question #149Security and compliance
A company needs to log and audit any principal that publishes messages to Amazon Simple Notification Service (Amazon SNS) topics and Amazon Simple Queue Service (Amazon SQS) queues...
CloudTrailVPC endpointsSNSSQS - Question #150Reliability and business continuity
A web application runs on Amazon EC2 instances in the us-east-1 Region and the us-west-2 Region. The instances run behind an Application Load Balancer (ALB) in each Region. An Amaz...
Route 53failover routinghealth checksdisaster recovery