Free Amazon SOA-C03 Exam Questions

Question 1

A CloudOps engineer is maintaining a web application that uses an Amazon CloudFront webdistribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All serviceshave logging enabled. The CloudOps engineer needs to investigate HTTP Layer 7 status codes fromthe web application.Which log sources contain the status codes? (Select TWO.)

A : VPC Flow Logs

B : AWS CloudTrail logs

C : ALB access logs

D : CloudFront access logs

E : RDS logs

Answer: C,D

Question 2

A company plans to host an application on Amazon EC2 instances distributed across multipleAvailability Zones. The application must scale to millions of requests per second and handle suddenand volatile traffic patterns. The solution must use a single static IP address per Availability Zone.Which solution will meet these requirements?

A : Amazon Simple Queue Service (Amazon SQS)

B : Application Load Balancer

C : AWS Global Accelerator

D : Network Load Balancer

Answer: C

Question 3

A company made a configuration change to an Amazon EC2 Auto Scaling group that hosts a production application. The change affected the number of available EC2 instances and caused the application to be slow to respond. The company needs a solution to provide an email notification when a management change occurs to the Auto Scaling group. The company has already set up a trail in AWS CloudTrail to log management write changes. A CloudOps engineer creates an Amazon SNS topic that has the appropriate subscribers. What should the CloudOps engineer do next to meet this requirement?

A : Use AWS Config to monitor the trail for changes to the Auto Scaling group. Configure AWS Config to publish a message to the SNS topic when a change is detected.

B : Use AWS Security Hub to monitor the trail for changes to the Auto Scaling group. Configure Security Hub to publish a message to the SNS topic when a change is detected.

C : Create an Amazon EventBridge rule to run in response to CloudTrail management write events that involve the Auto Scaling group. Configure the EventBridge rule to publish a message to the SNS topic when a change is detected.

D : Store all CloudTrail management events in an Amazon S3 bucket. Use S3 Event Notifications to publish a message to the SNS topic when a change to the Auto Scaling group is detected.

Answer: C

Question 4

A company plans to host an application on Amazon EC2 instances distributed across multipleAvailability Zones. The application must scale to millions of requests per second and handle suddenand volatile traffic patterns. The solution must use a single static IP address per Availability Zone.Which solution will meet these requirements?

A : Amazon Simple Queue Service (Amazon SQS)

B : Application Load Balancer

C : AWS Global Accelerator

D : Network Load Balancer

Answer: C

Question 5

A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The companys new security policy requires all AWS resources to be encrypted at rest and in transit. What should a CloudOps engineer do to encrypt the database?

A : Configure encryption on the existing DB instance.

B : Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.

C : Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.

D : Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy

Answer: D