Amazon AWS Certified CloudOps Engineer - Associate SOA-C03 Free Practice Test - 20 Questions

Question 1

A company runs a web application on Amazon EC2 instances in an Auto Scaling group. The application experiences variable traffic patterns. The operations team wants to scale out based on CPU utilization. Which CloudWatch metric and threshold combination should be used in a simple scaling policy?

Accepted Answer

Average CPU Utilization > 70% for 2 consecutive periods of 1 minute

Question 2

A DevOps engineer needs to grant an IAM user in Account A access to an S3 bucket in Account B. Which policy configuration will achieve this?

Accepted Answer

Attach a bucket policy in Account B allowing access to the user's ARN, and attach an IAM user policy in Account A allowing S3 actions on the bucket.

Question 3

A company uses AWS CloudFormation to deploy resources. They have a template that defines an EC2 instance and an Elastic IP address. The Elastic IP must be associated with the EC2 instance before the next resource that depends on the association is created. What should be added to the template to ensure this order?

Accepted Answer

Use a DependsOn attribute on the next resource to wait for the Elastic IP association.

Question 4

An EC2 instance in a private subnet needs to access the internet to download patches. Which configuration will allow this without a public IP?

Accepted Answer

Add a NAT gateway in a public subnet and update the private subnet's route table to point 0.0.0.0/0 to the NAT gateway.

Question 5

A company is using AWS CodeDeploy to deploy applications to an Auto Scaling group. The deployment fails because the new instances launched by the Auto Scaling group are not registered with the target group. What should be done to ensure new instances are automatically registered?

Accepted Answer

Configure the Auto Scaling group to attach to the target group.

Question 6

A DevOps engineer needs to capture all API calls made to a specific S3 bucket for compliance purposes. The logs must be stored in CloudWatch Logs for real-time analysis. Which configuration should be used?

Accepted Answer

Enable CloudTrail data events for the S3 bucket and send events to CloudWatch Logs.

Question 7

A company runs a stateful web application on EC2 instances behind an Application Load Balancer (ALB). During deployment, the DevOps engineer wants to ensure that in-flight requests are completed before instances are terminated. What should be configured?

Accepted Answer

Enable connection draining on the target group and set a sufficient timeout.

Question 8

An operations team needs to centrally manage and automate patching of EC2 instances across multiple AWS accounts and regions. Which AWS service should be used?

Accepted Answer

AWS Systems Manager Patch Manager with multi-account management via AWS Organizations.

Question 9

A company has a production RDS MySQL database with a read replica. The primary instance fails unexpectedly. What is the fastest way to restore database write operations?

Accepted Answer

Promote the read replica to a standalone instance.

Question 10

A DevOps engineer is designing a VPC with multiple subnets. The engineering team needs a subnet where EC2 instances can be accessed directly from the internet over SSH. Which VPC configuration is required?

Accepted Answer

A public subnet with a route table that has a default route (0.0.0.0/0) to an internet gateway, and instances have public IPs.

Question 11

A company wants to use AWS CloudTrail to monitor access to an S3 bucket. They need to know who accessed a specific object and when. What type of event should they enable?

Accepted Answer

Data events for the S3 bucket

Question 12

An Auto Scaling group uses a lifecycle hook to perform custom actions before an instance is terminated. After the action is complete, what must the Auto Scaling group do to proceed with termination?

Accepted Answer

Call the complete-lifecycle-action API with the lifecycle hook token.

Question 13

A company runs a production workload on EC2 instances in an Auto Scaling group. To ensure high availability, the instances are distributed across multiple Availability Zones. The workload is stateless. What is the most cost-effective way to store session data that can be accessed by any instance?

Accepted Answer

Store session data in Amazon ElastiCache for Redis.

Question 14

A DevOps engineer is troubleshooting an issue where an EC2 instance behind a Network Load Balancer (NLB) is not receiving traffic. The instance passes health checks. What could be the problem?

Accepted Answer

The security group for the instance does not allow traffic from the NLB

Question 15

A company needs to back up an RDS database to meet compliance requirements that dictate backups must be stored in a different AWS region. Which backup strategy should be used?

Accepted Answer

Take manual snapshots and copy them to the other region using AWS Backup.

Question 16

A company is using AWS Key Management Service (KMS) to encrypt EBS volumes. They want to automatically rotate the KMS key every year. Which action should they take?

Accepted Answer

Enable automatic key rotation for the customer managed key.

Question 17

A DevOps engineer is designing a CI/CD pipeline using AWS CodePipeline. The pipeline must deploy to an EC2 instance fleet. The deployment must be performed in-place with minimal downtime. Which deployment strategy should be used?

Accepted Answer

Rolling deployment with a fixed number of instances at a time.

Question 18

An EC2 instance running Linux has high memory usage. The operations team wants to be alerted when memory utilization exceeds 90%. How can they achieve this?

Accepted Answer

Install the CloudWatch agent and configure a custom metric for memory utilization with an alarm.

Question 19

A company has a legacy application that runs on a single EC2 instance. The company wants to improve reliability without significant re-architecture. Which action will provide the highest availability?

Accepted Answer

Place the instance in an Auto Scaling group with a minimum size of 1 and a launch template that replicates the instance.

Question 20

A DevOps engineer needs to enforce that all S3 buckets in the account have versioning enabled. Which AWS service can be used to automatically remediate noncompliant buckets?

Accepted Answer

AWS Config with an auto-remediation rule using AWS Systems Manager Automation.

Amazon AWS Certified CloudOps Engineer - Associate SOA-C03 Free Practice Test - 20 Questions

The free lane is only the front row