10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The SOA-C03 exam has 65 questions and runs 2 hours 10 minutes.
These 10 free SOA-C03 questions are organized by exam domain, so you can see how each part of the AWS Certified CloudOps Engineer - Associate (Exam SOA-C03) blueprint is tested. Reveal the answer and explanation under each question.
A CloudOps engineer must display memory utilization and disk space utilization for 300 Amazon EC2 instances on a CloudWatch dashboard. The instances currently publish only the default EC2 metrics. What must the engineer do?
Correct answer: A - Install and configure the CloudWatch agent on the instances
A dataset in Amazon S3 has unpredictable access patterns that change over time. Objects must remain available for immediate retrieval, and the company wants to avoid retrieval fees and manual lifecycle management. Which storage class is MOST appropriate?
Correct answer: D - S3 Intelligent-Tiering
Users report that an application behind an Application Load Balancer returns HTTP 503 errors. The registered EC2 instances are running, CPU utilization is normal, and the application responds correctly when tested directly on each instance. What is the MOST likely cause?
Correct answer: C - The health check is failing and no targets are healthy
To recover from data corruption, an engineer restores an Amazon RDS DB instance from a snapshot. The restore completes and the instance status is Available, but the application still cannot connect to the database. What is the MOST likely cause?
Correct answer: D - The restore created a new instance with a new endpoint
A company must deploy an identical logging and encryption baseline to every account in an organizational unit, including accounts that are created in the future. Which solution requires the LEAST ongoing operational effort?
Correct answer: C - CloudFormation StackSets with service-managed permissions and automatic deployment
A CloudFormation stack fails during its initial creation because of an invalid parameter value, and the stack is now in the ROLLBACK_COMPLETE state. The engineer corrects the template and attempts to update the stack, but the update is rejected. What must the engineer do?
Correct answer: A - Delete the stack and recreate it from the corrected template
A developer's IAM policy allows s3:DeleteObject, and the bucket policy allows the same action, but the developer still receives an AccessDenied error. Investigation shows that a service control policy attached to the parent organizational unit denies s3:DeleteObject. What must be done to allow the developer to delete objects?
Correct answer: A - Remove the deny statement from the service control policy
An unencrypted Amazon EBS volume is attached to a running production EC2 instance. Compliance now requires that the data be encrypted with a customer managed AWS KMS key. Which approach accomplishes this?
Correct answer: B - Snapshot the volume, copy the snapshot with encryption, and create a new volume
Instances in a private subnet can initiate outbound HTTPS connections, but the responses never arrive. Their security group allows all outbound traffic, and the route tables are correct. The subnet uses a custom network ACL whose only rules allow inbound TCP 443 and outbound TCP 443. What is the MOST likely cause?
Correct answer: B - The network ACL denies inbound return traffic on ephemeral ports
An application running in private subnets writes large volumes of data to Amazon S3 through a NAT gateway. The company wants to reduce the resulting data processing charges. Which change is MOST cost-effective?
Correct answer: D - Create a gateway VPC endpoint for Amazon S3
The full bank has 1,020 more SOA-C03 questions with explanations.
Continue in the free practice test →
View plans