Amazon AWS

AWS Certified CloudOps Engineer – Associate

SOA-C03

The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests your skills in operating and managing AWS environments. It is ideal for those looking to enhance their operational expertise on AWS.

486 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 461–470 of 486

Q461

A company needs to automatically scale its EC2 instances based on CPU usage. Which service should they use?

  • A AWS Elastic Beanstalk
  • B Auto Scaling
  • C AWS Systems Manager
  • D AWS Lambda
Explanation Auto Scaling dynamically adjusts instance count based on demand; the others do not provide automatic scaling.
Q462

What happens when an IAM user is created without any policies attached?

  • A User has full access to resources.
  • B User has no permissions.
  • C User can access public resources only.
  • D User can create policies.
Explanation The user has no permissions by default until policies are attached, while the other options suggest incorrect permission levels.
Q463

Which AWS service provides user authentication and authorization?

  • A AWS IAM
  • B Amazon S3
  • C AWS Lambda
  • D CloudFront
Explanation AWS IAM manages users and permissions; S3 is for storage, Lambda executes code, and CloudFront is a CDN.
Q464

A company needs to move logs from S3 to Glacier. Which is the best approach?

  • A S3 Lifecycle Policies
  • B AWS Data Pipeline
  • C EC2 Scheduled Task
  • D Manual Download
Explanation S3 Lifecycle Policies automate moving logs to Glacier; the other options require additional steps or are too manual.
Q465

What happens when an EC2 instance is terminated directly from the console?

  • A Data on EBS is preserved
  • B EC2 instance remains in the system
  • C EC2 instance is deleted permanently
  • D Instance can be restarted later
Explanation Terminating an EC2 instance deletes it permanently unless you have EBS snapshots; the others are incorrect as they misrepresent instance behavior.
Q466

Which service is best for real-time log analysis?

  • A Amazon CloudWatch Logs
  • B AWS S3
  • C AWS Snowball
  • D AWS RDS
Explanation Amazon CloudWatch Logs allows real-time monitoring and analysis of logs, while the others do not focus on logs.
Q467

A company needs to implement a VPN between its on-premises environment and these AWS services. Which AWS service should they consider?

  • A AWS Direct Connect
  • B AWS Lambda
  • C Amazon ECS
  • D AWS CodePipeline
Explanation AWS Direct Connect establishes dedicated network connections, unlike the other options which serve different purposes.
Q468

You are configuring an EC2 instance to launch a web server. What happens if you forget to specify a security group?

  • A Instance will not start
  • B Instance starts with default settings
  • C Instance uses public IP
  • D Access is blocked from all sources
Explanation If no security group is specified, the instance uses the default security group settings allowing it to start.
Q469

Which service enables managed Kubernetes on AWS?

  • A Amazon EKS
  • B AWS Lambda
  • C Amazon ECS
  • D AWS Batch
Explanation Amazon EKS is specifically designed for Kubernetes; the others serve different purposes.
Q470

A company needs to run code without provisioning servers. Which AWS service should it use?

  • A AWS Elastic Beanstalk
  • B AWS Lambda
  • C Amazon EC2
  • D Amazon S3
Explanation AWS Lambda runs code in response to events without needing server management; the others require server resources.