AWS SOA-C03 Certification Exam Sample Questions

SOA-C03 Braindumps, SOA-C03 Exam Dumps, SOA-C03 Examcollection, SOA-C03 Questions PDF, SOA-C03 Sample Questions, CloudOps Engineer Associate Dumps, CloudOps Engineer Associate Official Cert Guide PDF, CloudOps Engineer Associate VCE, AWS CloudOps Engineer Associate PDFWe have prepared AWS CloudOps Engineer Associate (SOA-C03) certification sample questions to make you aware of actual exam properties. This sample question set provides you with information about the CloudOps Engineer Associate exam pattern, question formate, a difficulty level of questions and time required to answer each question. To get familiar with AWS Certified CloudOps Engineer - Associate exam, we suggest you try our Sample AWS SOA-C03 Certification Practice Exam in simulated AWS certification exam environment.

To test your knowledge and understanding of concepts with real-time scenario based AWS SOA-C03 questions, we strongly recommend you to prepare and practice with Premium AWS CloudOps Engineer Associate Certification Practice Exam. The premium AWS CloudOps Engineer Associate certification practice exam helps you identify topics in which you are well prepared and topics in which you may need further training to achieving great score in actual AWS Certified CloudOps Engineer - Associate exam.

AWS SOA-C03 Sample Questions:

01. An AWS Lambda function behind Amazon API Gateway reads from a DynamoDB table and calls an external HTTP API. Its Duration metric has doubled this week, and CloudWatch Logs show no errors.
A CloudOps engineer must find which downstream call is responsible for the extra time.
What should the engineer do?
a) Turn on CloudWatch Lambda Insights for the function and review its memory and CPU charts
b) Turn on active tracing for the function and instrument its AWS SDK and HTTP clients for AWS X-Ray
c) Create a CloudTrail trail with data events for the function's Invoke calls
d) Raise the function's memory setting and compare the Duration metric afterward
 
02. A company runs an Amazon OpenSearch Service domain with public network access. A CloudOps engineer must ensure that only clients in the company’s office network, 203.0.113.0/24, can send requests to the domain.
Which approach meets this requirement?
a) Attach a security group to the domain that allows HTTPS from 203.0.113.0/24.
b) Associate an AWS WAF web ACL that contains an IP set rule with the domain.
c) Attach an identity-based policy that grants es:ESHttp* to the IAM users who work in the office.
d) Add an aws:SourceIp condition for 203.0.113.0/24 to the domain access policy.
 
03. Developers change IAM policies through a deployment pipeline. The security team wants the pipeline to stop automatically whenever a changed policy would allow any access that the currently deployed version of the same policy does not allow, while changes that only reduce access continue.
Which approach should a CloudOps engineer add to the pipeline?
a) Call the IAM Access Analyzer ValidatePolicy API on the updated policy and fail on any finding
b) Run the updated policy through the IAM policy simulator for a list of sample actions
c) Call the IAM Access Analyzer CheckNoNewAccess API with the existing and the updated policy
d) Generate a new policy with IAM Access Analyzer from the role's CloudTrail activity
 
04. An Amazon S3 File Gateway running as an on-premises VM presents an SMB share to engineering workstations. Users report that opening design files is often slow. CloudWatch shows CacheHitPercent consistently low, CachePercentUsed near 100 percent and high CloudBytesDownloaded, while CachePercentDirty stays low.
What should a CloudOps engineer do to improve read performance?
a) Run RefreshCache on the file share every hour
b) Add a local disk to the gateway VM and allocate it as cache storage
c) Enable S3 Transfer Acceleration on the S3 bucket that backs the file share
d) Increase the size of the gateway's root disk
 
05. During live sports streams, a media company's operations team must analyze CloudFront request data, such as the status code and cache result of each request, within seconds of the request so that they can react to problems while the event is running.
What should a CloudOps engineer configure?
a) CloudFront standard logs delivered to an S3 bucket and queried with Amazon Athena
b) The Cache statistics report in the CloudFront console
c) CloudFront real-time logs delivered to Amazon Kinesis Data Streams
d) CloudFront additional metrics in Amazon CloudWatch
 
06. An application on a production Amazon EC2 instance gets AWS credentials from the instance profile AppProfileV1. A new release needs the permissions of a different IAM role, delivered through the instance profile AppProfileV2. The instance must keep running, and the application must not lose its AWS credentials during the change.
What should a CloudOps engineer do?
a) Stop the instance, change its IAM instance profile to AppProfileV2, and start it again.
b) Detach AppProfileV1 from the instance, and then attach AppProfileV2.
c) Associate AppProfileV2 with the instance as a second instance profile.
d) Replace the instance's IAM instance profile association with AppProfileV2.
 
07. A company uses a scheduled script to delete Amazon EBS snapshots that are older than 30 days in one AWS Region. Last month a tagging mistake caused the script to delete snapshots that a team still needed. The script must keep deleting snapshots as it does today, but every snapshot it deletes must remain recoverable for 14 days afterward.
Which solution meets these requirements?
a) Lock the snapshots with EBS snapshot lock in governance mode for 14 days
b) Create a 14-day Recycle Bin retention rule for EBS snapshots
c) Store the snapshots in an AWS Backup vault that has AWS Backup Vault Lock turned on
d) Move the snapshots to the EBS snapshot archive tier before the script runs
 
08. AWS Trusted Advisor reports a red Security Groups - Specific Ports Unrestricted finding for a security group that allows TCP port 22 from 0.0.0.0/0. Administrators use that rule only to open shell sessions on the instances, which already run the SSM Agent with an instance profile that allows Systems Manager.
Which remediation resolves the finding and keeps shell access for the administrators?
a) Add a network ACL rule that denies TCP port 22 from 0.0.0.0/0.
b) Change the rule to port 2222 and move the SSH daemon to that port.
c) Exclude the security group from the check in Trusted Advisor.
d) Delete the inbound rule and have administrators connect with Session Manager.
 
09. Amazon EC2 instances in private subnets have no NAT gateway or internet route and reach Amazon S3 only through an S3 gateway endpoint. The security team wants to stop the instances from copying data to any bucket other than the company's example-analytics-data bucket, while the instances keep their existing IAM role.
Which change meets this requirement?
a) Add a bucket policy to example-analytics-data that denies every request that does not arrive through the gateway endpoint
b) Replace the S3 prefix list route in the private subnets' route tables with an S3 interface endpoint
c) Attach a gateway endpoint policy that allows S3 actions only on example-analytics-data and its objects
d) Add an outbound security group rule that allows HTTPS only to the S3 prefix list for the Region
 
10. Because of a content licensing agreement, a company must serve a France-specific version of its website, hosted on a separate stack, to users located in France. Users in every other country must receive the global site. The decision must follow the country users are in, not network latency or distance to a Region.
Which Amazon Route 53 configuration meets this requirement?
a) A geolocation record for France and a Default geolocation record for all other locations
b) Geoproximity records with a positive bias on the French stack's Region
c) Latency records for the Region of each stack
d) Weighted records that send a share of traffic to the French stack

Answers:

Question: 01
Answer: b		 Question: 02
Answer: d		 Question: 03
Answer: c		 Question: 04
Answer: b		 Question: 05
Answer: c
Question: 06
Answer: d		 Question: 07
Answer: b		 Question: 08
Answer: d		 Question: 09
Answer: c		 Question: 10
Answer: a

Note: Please update us by writing an email on feedback@vmexam.com for any error in AWS Certified CloudOps Engineer - Associate certification exam sample questions

Rating: 4.8 / 5 (188 votes)