Amazon SOA-C03 Practice Exam Questions

Amazon SOA-C03 Sample Question Answers

Question # 1

A company has a microservice that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). A CloudOps engineer must use Amazon Route 53 to create a record that maps the ALB URL to example.com. Which type of Route 53 record will meet this requirement? 

A. An A record 
B. An AAAA record 
C. An alias record 
D. A CNAME record 

Show Answer

Question # 2

A company’s ecommerce application is running on Amazon EC2 instances that are behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. Customers report that the website is occasionally down. When the website is down, it returns an HTTP 500 (server error) status code to customer browsers. The Auto Scaling group’s health check is configured for EC2 status checks, and the instances appear healthy. Which solution will resolve the problem?

A. Replace the ALB with a Network Load Balancer. 
B. Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group. 
C. Update the target group configuration on the ALB. Enable session affinity (sticky sessions). 
D. Install the Amazon CloudWatch agent on all instances. Configure the agent to reboot the instances. 

Show Answer

Question # 3

A company has two AWS accounts connected by a transit gateway. Each account has one VPC in the same AWS Region. The company wants to simplify inbound and outbound rules in security groups by referencing security group IDs instead of IP CIDR blocks. Which solution will meet this requirement? 

A. Create VPC peering connections and remove the transit gateway. 
B. Enable security group referencing support on the transit gateway. 
C. Enable security group referencing support on each transit gateway attachment. 
D. Deploy private NAT gateways in each VPC. 

Show Answer

Question # 4

A company plans to migrate several of its high-performance computing (HPC) virtual machines to Amazon EC2. The deployment must minimize network latency and maximize network throughput between the instances. Which placement group strategy should the CloudOps engineer choose? 

A. Deploy the instances in a cluster placement group in one Availability Zone. 
B. Deploy the instances in a partition placement group in two Availability Zones. 
C. Deploy the instances in a partition placement group in one Availability Zone. 
D. Deploy the instances in a spread placement group in two Availability Zones. 

Show Answer

Question # 5

A company uses multiple Amazon RDS databases to support an application. The application receives all its traffic during weekdays and is idle during weekends. The company wants a solution to automatically manage the RDS DB instances during idle periods to optimize costs. Which solution will meet these requirements? 

A. Use a cron job to automatically scale down the RDS DB instance type during weekends. 
B. Configure Instance Scheduler on AWS to stop the RDS DB instances at the beginning of each weekend and to start the instances at the end of each weekend. 
C. Purchase Reserved Instances for the RDS DB instances. 
D. Use the auto scaling feature of Amazon RDS to automatically adjust the DB instance type based on CPU utilization. 

Show Answer

Question # 6

A CloudOps engineer is preparing to deploy an application to Amazon EC2 instances that are in an Auto Scaling group. The application requires dependencies to be installed. Application updates are issued weekly. The CloudOps engineer needs to implement a solution to incorporate the application updates on a regular basis. The solution also must conduct a vulnerability scan during Amazon Machine Image (AMI) creation. What is the MOST operationally efficient solution that meets these requirements? 

A. Create a script that uses Packer and schedule a cron job. 
B. Install the application and dependencies on an EC2 instance and create an AMI. 
C. Use EC2 Image Builder with a custom recipe to install the application and dependencies. 
D. Invoke the EC2 CreateImage API operation by using an EventBridge scheduled rule. 

Show Answer

Question # 7

A company needs to monitor its website's availability to end users. The company needs a solution to provide an Amazon Simple Notification Service (Amazon SNS) notification if the website's uptime decreases to less than 99%. The monitoring must provide an accurate view of the user experience on the website. Which solution will meet these requirements? 

A. Create an Amazon CloudWatch alarm that is based on the website’s logs that are published to a CloudWatch Logs log group. Configure the alarm to publish an SNS notification if the number of HTTP 4xx and 5xx errors exceeds a specified threshold. 
B. Create an Amazon CloudWatch alarm that is based on the website's published metrics in CloudWatch. Configure the alarm to publish an SNS notification based on anomaly detection. 
C. Create an Amazon CloudWatch Synthetics heartbeat monitoring canary. Associate the canary with the website’s URL. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%. 
D. Create an Amazon CloudWatch Synthetics broken link checker monitoring canary. Associate the canary with the website’s URL. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%. 

Show Answer

Question # 8

A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created. What should a CloudOps engineer do to meet this requirement? 

A. Configure an IAM policy that denies the s3:DeleteObject action for all users. Remove the policy after three months. 
B. Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months. 
C. Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups. 
D. Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Show Answer

Question # 9

A CloudOps engineer created a VPC with a private subnet, a security group allowing all outbound traffic, and an endpoint for EC2 Instance Connect in the private subnet. The EC2 instance was launched without an SSH key pair, using the same subnet and security group. However, the engineer cannot connect via EC2 Instance Connect endpoint. How can the CloudOps engineer connect to the instance? 

A. Create an inbound rule in the security group to allow HTTPS traffic on port 443 from the private subnet. 
B. Create an inbound rule in the security group to allow SSH traffic on port 22 from the private subnet. 
C. Create an IAM instance profile that allows AWS Systems Manager Session Manager to access the EC2 instance. Associate the instance profile with the instance. 
D. Recreate the EC2 instance. Associate an SSH key pair with the instance. 

Show Answer

Question # 10

A company’s application servers in AWS account 111122223333 use a security group sg-1234abcd. They need to access a database hosted in account 444455556666. The VPCs are connected using a VPC peering connection (pcx-b04deed9). A CloudOps engineer must configure the database’s security group to allow new connections only from the application servers. What should the engineer do? 

A. Add an inbound rule to the database's security group. Reference 111122223333/sg1234abcd as the source. 
B. Add an inbound rule to the database's security group. Reference pcx-b04deed9/sg1234abcd as the source. 
C. Add an inbound rule to the database's security group. Reference sg-1234abcd as the source. 
D. Add an inbound rule to the database's security group. Reference 444455556666/sg1234abcd as the source. 

Show Answer