Amazon AWS
AWS Certified CloudOps Engineer – Associate
SOA-C03
The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests your skills in operating and managing AWS environments. It is ideal for those looking to enhance their operational expertise on AWS.
Questions 441–450 of 486
What happens when a user tries to access a resource without proper IAM permissions?
A
Access denied error
B
Resource is accessible
C
Access granted automatically
D
User locks account
Without the necessary permissions, access will be denied, while the other options are incorrect outcomes.
A company needs to enable multi-factor authentication (MFA) for its AWS IAM users. Which service should they utilize?
A
IAM
B
Cognito
C
CloudTrail
D
CloudFormation
IAM allows configuring MFA for user accounts, while other services don't focus on IAM users' authentication.
What happens when you enable auto-scaling for an EC2 instance?
A
EC2 instances will reduce costs.
B
Instances adjust based on demand.
C
Instance type cannot be changed.
D
No new instances are launched.
Auto-scaling dynamically adjusts instance count based on demand metrics, while other options misrepresent the behavior.
You are configuring AWS CloudFront for a video streaming application. Which config will lead to the lowest latency?
A
Use a single origin server.
B
Enable multiple cache behaviors.
C
Set viewer protocol policy to HTTPS only.
D
Deploy multiple edge locations globally.
Multiple edge locations minimize latency by caching content closer to users, while others do not focus on geographical spread.
Which service allows discovery of AWS resources by tags?
A
AWS Resource Groups
B
AWS CloudTrail
C
AWS Config
D
AWS CloudFormation
AWS Resource Groups allows grouping of resources by tags, while the others serve different purposes.
A company needs a robust backup solution across regions. What should they implement?
A
AWS Backup
B
Amazon S3
C
AWS Elastic Block Store
D
AWS Direct Connect
AWS Backup provides cross-region backup capabilities, unlike the other services listed.
What happens when an EC2 instance is stopped and restarted?
A
IP address remains the same
B
Data on EBS is lost
C
Instance type cannot change
D
Public IP assigned is changed
The public IP of a stopped EC2 instance is released, while the other statements are incorrect.
Which service allows you to automate security assessments?
A
Amazon Inspector
B
AWS Config
C
Amazon CloudWatch
D
AWS Secrets Manager
Amazon Inspector automates security assessments, while others focus on configuration tracking, monitoring, or secrets management.
A company needs to monitor API usage across multiple accounts. Which AWS tool should they use?
A
AWS CloudTrail
B
AWS Service Catalog
C
AWS CloudFormation
D
Amazon QuickSight
AWS CloudTrail provides API usage logs across multiple accounts, whereas the others do not focus on monitoring API activity.
You are configuring an Auto Scaling group. What happens when instance health checks fail?
A
Instances are terminated automatically
B
Alerts are sent to CloudWatch
C
Instances are resized
D
Nothing changes
Failed health checks lead to instance termination for replacement, while the others do not reflect default behavior of Auto Scaling.