Amazon AWS
AWS Certified CloudOps Engineer – Associate
SOA-C03
The AWS Certified CloudOps Engineer – Associate (SOA-C03) exam tests your skills in operating and managing AWS environments. It is ideal for those looking to enhance their operational expertise on AWS.
Questions 481–486 of 486
Which service provides event-driven computing for AWS users?
A
AWS Lambda
B
EC2 Instances
C
S3 Buckets
D
RDS Databases
AWS Lambda is designed for event-driven functions, while others are compute or storage services.
A company needs to automate its security compliance checks. Which AWS service should they use?
A
AWS CloudTrail
B
AWS Config
C
AWS Inspector
D
AWS Shield
AWS Config continuously evaluates compliance, while others focus on different aspects of security.
You are configuring a VPC peering connection. What happens if the peering connection is established but route tables are not updated?
A
Traffic will be routed correctly
B
Traffic will be blocked
C
Only public traffic routes
D
Peering will fail
Without updated route tables, VPC traffic will not flow between peers, hence it will be blocked.
Which AWS service is ideal for automating server management tasks?
A
AWS Systems Manager
B
Amazon CloudWatch
C
AWS Lambda
D
Amazon EC2
AWS Systems Manager automates operational tasks, unlike others.
A company needs to replicate data between AWS regions for disaster recovery. Which service should they use?
A
Amazon S3
B
AWS DMS
C
Amazon RDS Automated Backups
D
S3 Cross-Region Replication
S3 Cross-Region Replication automates data copying between regions.
What happens when a user is denied permission in an AWS IAM policy?
A
User accesses resources with limited permissions
B
User receives an error without access
C
User can always request elevated permissions
D
User's access is automatically granted
When denied, the user cannot access the resource, receiving an error.