The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests your skills in operating and managing AWS environments. It is ideal for those looking to enhance their operational expertise on AWS.
What happens when you set an AWS Auto Scaling group to a desired capacity of zero?
AInstances remain running
BInstances will be terminated
CAuto Scaling is disabled
DNew instances will be launched
Explanation
Setting desired capacity to zero terminates all instances; others are not accurate descriptions of the behavior.
Q322
Which AWS service enables you to run Docker containers?
AAmazon EKS
BAWS Lambda
CAmazon RDS
DAmazon S3
Explanation
Amazon EKS (Elastic Kubernetes Service) is designed for running Docker containers, while the other options serve different purposes.
Q323
A company needs persistent storage for their EC2 instance. What should they use?
AAmazon S3
BAmazon EBS
CAWS Lambda
DAWS Fargate
Explanation
Amazon EBS (Elastic Block Store) provides persistent block storage for EC2 instances, unlike the other options which do not support this use case.
Q324
What might happen if a security group rule is misconfigured for an EC2 instance?
AThe instance will be terminated.
BAll inbound traffic is blocked.
CThe instance will slow down.
DTraffic will route through AWS VPN.
Explanation
A misconfigured security group can block inbound traffic, not affecting instance performance or routing in the other scenarios.
Q325
Which service can you use to automate infrastructure deployment?
AAWS CloudFormation
BAWS S3
CAWS CodePipeline
DAWS Lambda
Explanation
AWS CloudFormation automates infrastructure deployments; S3 is for storage, CodePipeline is for CI/CD, and Lambda runs code in response to events.
Q326
A company needs to ensure its EC2 instances restart automatically if they fail. Which service should it use?
AAuto Scaling
BElastic Load Balancer
CEC2 Image Builder
DAmazon CloudWatch
Explanation
Auto Scaling can automatically replace failed instances; ELB manages load, CloudWatch monitors resources, EC2 Image Builder is for creating images.
Q327
What happens when you create an IAM policy without specifying any actions?
ADeny all actions
BAllow all actions
CPolicy is ignored
DPolicy applies with defaults
Explanation
IAM policies default to 'Deny' if no actions are specified; thus, no access is granted.
Q328
Which service allows you to automate infrastructure provisioning in AWS?
AAWS CloudFormation
BAWS Lambda
CAmazon S3
DAmazon RDS
Explanation
AWS CloudFormation automates infrastructure provisioning while the others do not.
Q329
You are configuring Amazon S3 bucket policies. Which of the following actions is allowed by a policy that has "s3:PutObject"?
AUpload files to the bucket
BDelete files from the bucket
CList objects in the bucket
DModify bucket permissions
Explanation
"s3:PutObject" allows uploading files only, not deleting or modifying permissions.
Q330
What happens when you enable versioning on an S3 bucket?
AObjects are permanently deleted
BPrevious versions are preserved
CStorage costs decrease
DAccess times improve
Explanation
Enabling versioning preserves previous versions, unlike the misleading other options.