SOA-C03 practice questions 1–10

1. Question 1 · 189 in bank

   A CloudOps engineer is examining the following AWS CloudFormation template:

   

   Why will the stack creation fail?

   • AThe Outputs section of the CloudFormation template was omitted.
   • BThe Parameters section of the CloudFormation template was omitted.
   • CThe PrivateDnsName cannot be sot from a CloudFormation template.
   • DThe VPC was not specified in the CloudFormation template.

   Show answer

   Answer: C

   Next question

2. Question 2 · 189 in bank

   A company applies user-defined tags to resources that are associated with the company's AWS workloads. Twenty days after applying the tags, the company notices that it cannot use the tags to filter views in the AWS Cost Explorer console. What is the reason for this issue?

   • AIt takes at least 30 days to be able to use tags to filter views in Cost Explorer.
   • BThe company has not activated the user-defined tags for cost allocation.
   • CThe company has not created an AWS Cost and Usage Report.
   • DThe company has not created a usage budget in AWS Budgets.

   Show answer

   Answer: B

   Next question

3. Question 3 · 189 in bank

   An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 instances with a baseline configuration file to capture log files. There is a new requirement to capture the DHCP log files that exist on 50 of the instances. What is the MOST operationally efficient way to meet this new requirement?

   • ACreate an additional CloudWatch agent configuration filo to capture the DHCP logs. Use the AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option to apply the additional configuration file.
   • BLog in to each EC2 instance with administrator rights. Create a PowerShell script to push the needed baseline log files and DHCP log files to CloudWatch.
   • CRun the CloudWatch agent configuration file wizard on each EC2 instance. Verify that the baseline log files are included and add the DHCP log files during the wizard creation process.
   • DRun the CloudWatch agent configuration file wizard on each EC2 instance and select the advanced detail level. This will capture the operating system log files.

   Show answer

   Answer: A

   Next question

4. Question 4 · 189 in bank

   A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created. What should a CloudOps engineer do to meet this requirement?

   • AConfigure an IAM policy that denies the s3:DeleteObject action for all users. Three months after an object is written, remove the policy.
   • BEnable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.
   • CEnable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.
   • DEnable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

   Show answer

   Answer: B

   Next question

5. Question 5 · 189 in bank

   A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs However, there are no logs in CloudWatch Logs. What could be blocking the VPC flow logs from being published to CloudWatch Logs?

   • AThe IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.
   • BThe IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.
   • CThe VPC is configured for IPv6 addresses.
   • DThe VPC is peered with another VPC in the AWS account

   Show answer

   Answer: A

   Next question

6. Question 6 · 189 in bank

   A company is migrating a legacy application to AWS. The company manually installs and configures the legacy application on Amazon EC2 instances across multiple Availability Zones. The company sets up an Application Load Balancer (ALB) for the application. The company sets the target group routing algorithm to weighted random. The application requires session affinity. After the company deploys the application, users report random application errors that were not present in the legacy version of the application. The target group health checks do not show any failures. The company must resolve the application errors. Which solution will meet this requirement?

   • ASet the routing algorithm of the target group to least outstanding requests.
   • BTurn on anomaly mitigation for the target group.
   • CTurn off the cross-zone load balancing attribute of the target group.
   • DIncrease the deregistration delay attribute of the target group.

   Show answer

   Answer: A

   Next question

7. Question 7 · 189 in bank

   A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A CloudOps engineer needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster. Which solution will meet these requirements?

   • ACreate an Aurora Replica. Promote the replica to replace the primary DB instance.
   • BCreate an AWS Lambda function to restore an automatic backup to the existing DB cluster.
   • CUse backtracking to rewind the existing DB cluster to the desired recovery point.
   • DUse point-in-time recovery to restore the existing DB duster to the desired recovery point.

   Show answer

   Answer: C

   Next question

8. Question 8 · 189 in bank

   A CloudOps engineer is troubleshooting an AWS CloudFormation stack creation that failed. Before the CloudOps engineer can identify the problem, the stack and its resources are deleted. For future deployments, the CloudOps engineer must preserve any resources that CloudFormation successfully created. What should the CloudOps engineer do to meet this requirement?

   • ASet the value of the DisableRollback parameter to False during stack creation.
   • BSet the value of the OnFailure parameter to DO_NOTHING during stack creation.
   • CSpecify a rollback configuration that has a rollback trigger of DO_NOTHING during stack creation
   • DSet the value of the OnFailure parameter to ROLLBACK during stack creation.

   Show answer

   Answer: B

   Next question

9. Question 9 · 189 in bank

   A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancing (ELB) load balancer. The company’s security team wants to protect the website by using AWS Certificate Manager (ACM) certificates. The load balancer must automatically redirect any HTTP requests to HTTPS. Which solution will meet these requirements?

   • ACreate an Application Load Balancer that has one HTTPS listener on port 80. Attach an SSL/TLS certificate to listener port 80. Create a rule to redirect requests from HTTP to HTTPS.
   • BCreate an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocol listener on port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
   • CCreate an Application Load Balancer that has two TCP listeners on port 80 and port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
   • DCreate a Network Load Balancer that has two TCP listeners on port 80 and port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.

   Show answer

   Answer: B

   Next question

10. Question 10 · 189 in bank

    A company uses AWS Organizations to manage a set of AWS accounts. The company has set up organizational units (OUs) in the organization. An application OU supports various applications. A CloudOps engineer must prevent users from launching Amazon EC2 instances that do not have a CostCenter-Project tag into any account in the application OU. The restriction must apply only to accounts in the application OU. Which solution will meet these requirements?

    • ACreate an IAM group that has a policy that allows the ec2:RunInstances action when the CostCenter-Project tag is present. Place all IAM users who need access to the application accounts in the IAM group.
    • BCreate a service control policy (SCP) that denies the oc2:RunInstances action when the CostCenter-Project tag is missing. Attach the SCP to the application OU.
    • CCreate an IAM role that has a policy that allows the oc2:RunInstances action when the CostCenter-Project tag is present. Attach the IAM role to the IAM users that are in the application OU accounts.
    • DCreate a service control policy (SCP) that denies the ec2:RunInstances action when the CostCenter-Project tag is missing. Attach the SCP to the root OU.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C03 practice, question 1. 189 questions available.