Amazon AWS

AWS Certified CloudOps Engineer – Associate

SOA-C03

The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests your skills in operating and managing AWS environments. It is ideal for those looking to enhance their operational expertise on AWS.

486 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 131–140 of 486

Q131

A company needs to store large amounts of unstructured data. Which service is most suitable?

  • A RDS
  • B S3
  • C DynamoDB
  • D Redshift
Explanation Amazon S3 is designed for unstructured data storage, unlike the others which are for structured data.
Q132

What happens when a CloudFormation stack update fails?

  • A All resources are deleted.
  • B The stack remains unchanged.
  • C Changes are rolled back.
  • D The stack is permanently disabled.
Explanation CloudFormation automatically rolls back changes to maintain state, while the other options are incorrect outcomes.
Q133

Which service provides automatic scaling for applications?

  • A AWS Elastic Beanstalk
  • B Amazon S3
  • C AWS Lambda
  • D Amazon EBS
Explanation AWS Elastic Beanstalk facilitates automatic scaling; the others require manual adjustments or are not for applications.
Q134

A company needs to ensure data privacy compliance when using a storage service. Which AWS feature should they implement?

  • A Amazon S3 Encryption
  • B AWS Direct Connect
  • C Amazon CloudFront
  • D AWS Backup
Explanation Amazon S3 Encryption secures data at rest; the others do not primarily focus on data compliance.
Q135

You are configuring AWS IAM policies. What happens if you grant a user both 'Allow' and 'Deny' permissions?

  • A Allow takes precedence
  • B Deny takes precedence
  • C No effective permissions
  • D Permissions are cumulative
Explanation Deny takes precedence over Allow in IAM policies; the others reflect incorrect IAM behavior.
Q136

A company needs to provide fine-grained access control to their AWS resources. Which service should they use?

  • A AWS IAM
  • B AWS CloudTrail
  • C AWS Config
  • D AWS VPC
Explanation AWS IAM allows for detailed permissions management over resources, unlike the other services which serve different purposes.
Q137

What happens when an EC2 instance is stopped and then started again?

  • A It retains the same IP address.
  • B It loses all data on its EBS.
  • C It retains its EBS volumes.
  • D It changes to a different instance type.
Explanation Stopping and starting an EC2 instance does not affect attached EBS volumes; they persist.
Q138

You are configuring an AWS Lambda function and need to control its execution time. Which property would you adjust?

  • A Memory size
  • B Timeout
  • C Retries
  • D Concurrent executions
Explanation The Timeout setting controls how long the function can run before being terminated, while memory and other options do not directly affect execution length.
Q139

Which service is used for managing AWS keys securely?

  • A AWS Key Management Service
  • B AWS Secrets Manager
  • C AWS Shield
  • D AWS IAM Roles
Explanation AWS Key Management Service (KMS) is designed to create and control cryptographic keys, unlike the other options.
Q140

A company needs to run a script on their EC2 instance at startup. Which service should they use?

  • A AWS Lambda
  • B User Data
  • C CloudFormation
  • D CloudWatch Events
Explanation User Data allows scripts to run at instance startup, while others do not fit this specific use case.