The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests your skills in operating and managing AWS environments. It is ideal for those looking to enhance their operational expertise on AWS.
A company needs to securely manage API keys for multiple applications. Which service should they use?
AAWS Secrets Manager
BAWS Config
CAmazon Cognito
DAWS CloudTrail
Explanation
AWS Secrets Manager securely stores and manages secrets like API keys.
Q102
You are configuring an IAM policy that allows EC2 instance management. What should be the policy action?
Aec2:StartInstances
Bec2:DescribeVolumes
Cec2:TerminateInstances
Dec2:RunInstances
Explanation
The action ec2:StartInstances directly relates to starting EC2 instances, while others are various actions that don't specifically start instances.
Q103
Which AWS service provides automated security assessments?
AAWS Inspector
BAWS Shield
CAWS Config
DAWS GuardDuty
Explanation
AWS Inspector performs automated security assessments, while the others have different functionalities.
Q104
A company needs to migrate a multi-tier web application to AWS. Which architecture is best suited?
AMonolithic architecture
BServerless architecture
CMicroservices architecture
DSingle-instance architecture
Explanation
Microservices architecture best supports scalability and flexibility for multi-tier applications, unlike the other options.
Q105
You are configuring a VPC peering connection. What happens if CIDR ranges overlap?
APeering will succeed as normal
BTraffic is automatically blocked
CPeering will fail to establish
DOnly public subnets can connect
Explanation
Peering connections cannot be established with overlapping CIDR ranges; this results in failure.
Q106
Which service helps automate provisioning in AWS?
AAWS CloudFormation
BAWS Lambda
CAWS Elastic Beanstalk
DAWS CodePipeline
Explanation
AWS CloudFormation automates resource provisioning; others are primarily for deployment or functions.
Q107
A company needs to monitor their AWS resources' operational health. Which service should they use?
AAWS CloudTrail
BAmazon CloudWatch
CAWS Config
DAWS X-Ray
Explanation
Amazon CloudWatch provides accurate monitoring; CloudTrail is for logging actions and AWS X-Ray is for debugging applications.
Q108
What happens when you allocate an Elastic IP but do not associate it with an instance?
AIt incurs no charges.
BIt generates a recurring charge.
CIt gets automatically deleted.
DIt blocks incoming traffic.
Explanation
An unassociated Elastic IP incurs charges; the other options misstate the billing or functionality of Elastic IPs.
Q109
Which service helps in automating AWS resource management?
AAWS Systems Manager
BAmazon Glacier
CAWS Lambda
DAmazon RDS
Explanation
AWS Systems Manager automates resource management, while others do not specialize in this area.
Q110
A company needs to set up a high-availability architecture for its web application. Which service should they primarily use?
AAWS Elastic Load Balancer
BAWS CloudFormation
CAmazon S3
DAmazon Route 53
Explanation
AWS Elastic Load Balancer distributes traffic for high availability, unlike the others which serve different purposes.