SOA-C03 logo
Focused certification exam prep
Start practice

SOA-C03 Exam Domains 2026: Complete Guide to All 5 Content Areas

TL;DR
  • Three domains tie for largest weight at 22% each: Monitoring/Logging/Analysis/Remediation/Performance, Reliability/Business Continuity, and...
  • Security and Compliance is the smallest domain at 16%, but still tested with scenario-based questions.
  • Networking and Content Delivery sits at 18%, covering connectivity and content delivery troubleshooting.
  • The exam guide behind these weightings is version 1.1, published June 1, 2026.

Domain Overview and Weightings

The AWS Certified CloudOps Engineer - Associate (SOA-C03) exam organizes its content into five domains, each representing a slice of the day-to-day work of an AWS operations engineer. Unlike exams with one dominant topic, SOA-C03 spreads its heaviest emphasis across three domains that tie for the top weighting. Understanding exactly how AWS splits this weighting is the single most useful thing you can do before building a study plan, because it tells you where your time actually pays off.

According to the current SOA-C03 exam guide (version 1.1, published June 1, 2026), the five domains and their weights are:

DomainWeight
Monitoring, Logging, Analysis, Remediation, and Performance Optimization22%
Reliability and Business Continuity22%
Deployment, Provisioning, and Automation22%
Networking and Content Delivery18%
Security and Compliance16%

That means roughly two-thirds of the exam comes from the three tied domains, and the remaining third splits between networking and security. If you're still deciding whether this certification fits your goals, it's worth reading Is the SOA-C03 Certification Worth It? Complete ROI Analysis 2026 before committing study hours to any single domain.

Why the tie matters: With three domains tied at 22%, you cannot "specialize" your way to a pass. A candidate who is strong in automation but weak in monitoring and reliability will still face nearly two-thirds of the exam outside their comfort zone.

Domain 1: Monitoring, Logging, Analysis, Remediation, and Performance Optimization (22%)

This domain covers the operational visibility side of AWS CloudOps work: setting up monitoring, interpreting logs, diagnosing issues, and tuning performance. Expect scenario-based questions that describe a symptom - a spike in latency, a failed health check, an unusual billing anomaly - and ask which combination of AWS services or configuration changes resolves it.

Core skills tested

Candidates must be comfortable configuring and interpreting monitoring pipelines, not just naming the services involved.

  • Building CloudWatch dashboards, alarms, and composite alarms for multi-service environments
  • Centralizing and querying logs across accounts and services
  • Diagnosing root causes from metrics, logs, and traces together rather than in isolation
  • Applying automated remediation triggers to reduce manual intervention
  • Identifying performance bottlenecks in compute, storage, and database layers

Because this is one of the three largest domains, question density here is high, and the format leans heavily on multi-step troubleshooting scenarios rather than simple definition recall.

Domain 2: Reliability and Business Continuity (22%)

This domain tests your ability to design and operate resilient systems that survive failure without excessive downtime or data loss. It's less about building brand-new architectures and more about operating, validating, and improving reliability in systems that already exist.

Core skills tested

Expect questions framed around real operational trade-offs between cost, complexity, and recovery objectives.

  • Implementing backup and disaster recovery strategies across services
  • Configuring multi-AZ and multi-Region failover for high availability
  • Evaluating recovery time and recovery point requirements against architecture choices
  • Testing failover and recovery procedures as part of normal operations
  • Scaling resources reactively and proactively to maintain availability under load

Key Takeaway

Reliability and Business Continuity questions often present two technically valid solutions and ask which one better balances recovery speed against operational cost - read every answer choice fully before selecting.

Domain 3: Deployment, Provisioning, and Automation (22%)

The third tied domain focuses on how resources get created, configured, and updated at scale. This is where infrastructure-as-code, automation pipelines, and configuration management converge with day-to-day operations.

Core skills tested

This domain rewards hands-on familiarity with automation tooling over memorized syntax.

  • Provisioning infrastructure through templated, repeatable deployment methods
  • Automating patching, configuration drift correction, and routine maintenance tasks
  • Managing multi-account and multi-Region deployment strategies
  • Rolling out changes safely with staged or incremental deployment patterns
  • Troubleshooting failed deployments and rolling back cleanly

Together, Domains 1 through 3 account for 66% of the exam. If you're mapping study hours against a fixed exam fee of $150, these three domains represent the best return on preparation time. For a broader walkthrough of building that plan, see the SOA-C03 Study Guide 2026: How to Pass on Your First Attempt.

Domain 4: Security and Compliance (16%)

Security and Compliance is the smallest domain by weight, but it is far from optional. Questions here focus on operational security practices an on-the-job CloudOps engineer applies daily, rather than deep security-architecture design.

Core skills tested

Expect practical, operations-oriented security scenarios rather than theoretical policy design.

  • Managing identity and access permissions for operational tasks
  • Applying encryption and data protection controls in day-to-day operations
  • Monitoring for security events and responding to detected anomalies
  • Enforcing compliance and governance guardrails across accounts
  • Auditing configuration changes and access patterns

Because this domain carries less weight than the top three, some candidates under-study it - a mistake, since the 720-point passing threshold (on the 100-1,000 scale) requires solid performance across every domain, not just the largest ones.

Domain 5: Networking and Content Delivery (18%)

Networking and Content Delivery sits just below the top tier at 18%, making it the second-largest single domain. It covers how operations engineers configure, secure, and troubleshoot connectivity between AWS resources, on-premises environments, and end users.

Core skills tested

Questions typically present a connectivity failure and ask for the most likely cause or fix.

  • Configuring and troubleshooting VPC connectivity, routing, and peering
  • Diagnosing DNS resolution and load balancing issues
  • Setting up and optimizing content delivery for latency-sensitive workloads
  • Managing hybrid connectivity between on-premises networks and AWS
  • Applying network-level security controls without breaking legitimate traffic

If you're unsure how this domain's difficulty compares to the others, the deeper breakdown in How Hard Is the SOA-C03 Exam? Complete Difficulty Guide 2026 covers where candidates most often lose points.

How the Domains Map to Exam Format

SOA-C03 is delivered as 65 questions in 130 minutes, split into 50 scored questions and 15 unscored questions used for exam calibration. You won't know which questions are unscored, so every question deserves full attention. Questions come in two formats: multiple-choice (one correct answer) and multiple-response (select multiple correct answers from a longer list).

Format tip: Multiple-response questions typically appear more often in the three 22%-weighted domains, since scenarios there frequently involve combining several correct actions rather than picking one right answer.

The exam can be taken at a Pearson VUE testing center or through online proctoring, and registration costs $150. There are no formal prerequisites, though AWS designs the exam for candidates with roughly one year of hands-on AWS deployment, management, troubleshooting, networking, and security experience, plus about one year in a related operations role. For a full breakdown of eligibility expectations, see SOA-C03 Requirements 2026: Eligibility, Prerequisites & How to Qualify, and for the full cost picture including retakes, check SOA-C03 Certification Cost 2026: Complete Pricing Breakdown.

A passing score is 720 on the 100-1,000 scale - a number that reflects a scaled result across all domains combined, not a fixed percentage of questions correct. The exact mechanics are explained in SOA-C03 Passing Score 2026: Exactly What You Need to Pass.

Scheduling Your Study Around Domain Weight

Because Domains 1 through 3 each carry 22% and Domain 5 carries 18%, a sensible plan devotes the most calendar time to those four areas, with Domain 4 (Security and Compliance, 16%) receiving a smaller but non-trivial block. Below is a sample allocation built around domain weight rather than generic study advice.

Week 1

Monitoring, Logging, Analysis, Remediation, and Performance Optimization

  • Build and interpret CloudWatch alarms and dashboards
  • Practice log-based root cause analysis scenarios
Week 2

Reliability and Business Continuity

  • Compare backup, DR, and multi-AZ/multi-Region strategies
  • Work through recovery-objective trade-off questions
Week 3

Deployment, Provisioning, and Automation

  • Practice templated provisioning and automated patching scenarios
  • Review rollback and staged deployment patterns
Week 4

Networking and Content Delivery, then Security and Compliance

  • Drill VPC connectivity and DNS troubleshooting
  • Finish with identity, encryption, and audit scenarios

This sequencing front-loads the three tied domains while still leaving dedicated time for networking and security before test day. For a condensed reference to keep nearby during final review, bookmark the SOA-C03 Cheat Sheet 2026: One-Page Review of Must-Know Facts.

Key Takeaway

Don't split study time evenly across five domains - allocate roughly proportional to the published weights, giving the 22% domains noticeably more hours than the 16-18% domains.

Practicing full-length questions under timed conditions on our practice test platform helps you experience how domain weighting actually feels in a live 130-minute session, rather than studying domains in isolation. Running multiple timed sets on the practice site also surfaces which of the five domains consistently costs you the most points.

Who Hires for These Domain Skills

Employers hiring for cloud operations, site reliability, and DevOps support roles look for exactly the skills these five domains test: monitoring and remediation, reliability engineering, deployment automation, networking troubleshooting, and operational security. If you're curious how this maps to real job postings and title variations, SOA-C03 Jobs covers the roles that most commonly list this certification as a preferred qualification. For context on how the credential factors into compensation conversations, see the SOA-C03 Salary Guide 2026: Complete Earnings Analysis.

The certification remains valid for three years. Recertification options include passing the current CloudOps exam again, passing AWS Certified DevOps Engineer - Professional, or completing the AWS Skill Builder maintenance path for a one-year extension - details worth planning for well before your three-year window closes.

Frequently Asked Questions

Which SOA-C03 domain should I study first?

There's no mandated order, but starting with one of the three 22%-weighted domains - Monitoring, Logging, Analysis, Remediation, and Performance Optimization; Reliability and Business Continuity; or Deployment, Provisioning, and Automation - builds momentum on the highest-value content first.

Is Security and Compliance safe to skip because it's the smallest domain?

No. At 16% it's still roughly one in six questions, and the 720 passing score reflects performance across all domains, not just the largest ones.

How many questions come from each domain on exam day?

AWS doesn't publish an exact per-domain question count, but the weightings (22%, 22%, 22%, 18%, 16%) indicate the approximate proportion of the 50 scored questions each domain represents.

Do the unscored questions belong to specific domains?

The 15 unscored questions are mixed in with the 50 scored ones across all five domains, and candidates cannot identify which questions are unscored during the exam.

Where can I find the exact wording of each domain's tasks?

The official SOA-C03 exam guide, currently version 1.1 published June 1, 2026, lists detailed task statements under each domain. Pairing that guide with practice questions on our practice test platform is the most direct way to confirm your readiness domain by domain.

Ready to pass your SOA-C03 exam?

Put this into practice with free SOA-C03 questions across every exam domain.