Official Bank
0/219
Page
1/4
AWS Certified CloudOps Engineer – Associate (SOA-C03) - AWS Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
219
Total Questions
1
Question
An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 instances with a baseline configuration file to capture log files. There is a new requirement to capture DHCP log files that exist on 50 of the instances.
What is the MOST operationally efficient way to meet this new requirement?
What is the MOST operationally efficient way to meet this new requirement?
Options
A
Log in to each EC2 instance with administrator rights and create a PowerShell script to push logs to CloudWatch.
B
Create an additional CloudWatch agent configuration file to capture the DHCP logs. Use AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option.
C
Run the CloudWatch agent configuration wizard on each EC2 instance and select the advanced detail level.
D
Run the CloudWatch agent configuration wizard on each EC2 instance and add DHCP logs manually.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet. The default network ACL is active on all subnets in the VPC, and all security groups allow outbound traffic.
Which solution will provide the EC2 instances in the private subnet with access to the internet?
Which solution will provide the EC2 instances in the private subnet with access to the internet?
Options
A
Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.
gateway.
gateway.
gateway.
gateway.
B
Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.
C
Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT
D
Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
A company needs to copy an Amazon Aurora database from one AWS account to a second account that uses a second AWS Region. A CloudOps engineer must automate this process to occur every day.
Which solution will meet these requirements with the LEAST operational overhead?
Which solution will meet these requirements with the LEAST operational overhead?
Options
A
Create an Amazon EventBridge rule that runs on a schedule. Create an AWS Lambda function that runs an automation script to copy the database to the second account and the second Region. Use the EventBridge rule to invoke the Lambda function.
B
Create a backup plan in AWS Backup. Specify the second account and the second Region as the destination.
C
Configure AWS Application Migration Service to replicate the Aurora database. Specify the second account and the second Region as the destination.
D
Configure Amazon EventBridge Scheduler with a recurring rule. Add the RDS StartExportTask API operation as a target. Specify the relevant details about the database and an Amazon S3 bucket to store the exported data. Create a replication rule for the S3 bucket to replicate data to the second account and the second Region.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
A company uses default settings to create an AWS Lambda function. The function needs to access an Amazon RDS database that is in a private subnet of a VPC. The function has the correct IAM permissions to access the database. The private subnet has appropriate routing configurations and is accessible from within the VPC. However, the Lambda function is unable to connect to the RDS instance.
What is the likely reason the Lambda function cannot connect to the RDS instance?
What is the likely reason the Lambda function cannot connect to the RDS instance?
Options
A
The Lambda function configuration did not deploy the function in the same VPC that contains the RDS instance.
B
The company did not set the RDS instance as the destination for the Lambda function in the function configuration.
C
The security group for the Lambda function does not allow outbound access to the RDS instance.
D
The VPC where the Lambda function is deployed is not peered with the VPC where the RDS instance is deployed.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
A CloudOps engineer is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us- west-2 with the error code: AMI [ami-12345678] does not exist
How should the CloudOps engineer ensure that the AWS CloudFormation template is working in every Region?
How should the CloudOps engineer ensure that the AWS CloudFormation template is working in every Region?
Options
A
Edit the AWS CloudFormation template to specify the Region code as part of the fully qualified AMI ID.
B
Copy the source Region’s Amazon Machine Image (AMI) to the destination Region and assign it the same ID.
C
Modify the AWS CloudFormation template by including the AMI IDs in the Mappings section.
Refer to the proper mapping within the template for the proper AMI ID.
Refer to the proper mapping within the template for the proper AMI ID.
D
Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageId control.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.