Free Amazon SOA-C03 Exam Questions

Become Amazon Certified with updated SOA-C03 exam questions and correct answers

Page: 1 / 31

Total 152 Questions | Updated On: Jan 29, 2026

Add To Cart

Question 1

A company's security policy requires incoming SSH traffic to be restricted to a defined set ofaddresses. The company is using an AWS Config rule to check whether security groups allowunrestricted incoming SSH traffic.A CloudOps engineer discovers a noncompliant resource and fixes the security group manually. TheCloudOps engineer wants to automate the remediation of other noncompliant resources.What is the MOST operationally efficient solution that meets these requirements?

A : Create a CloudWatch alarm for the AWS Config rule and invoke a Lambda function to remediate.

B : Configure an automatic remediation action on the AWS Config rule using AWSDisableIncomingSSHOnPort22.

C : Create an EventBridge rule for AWS Config events and invoke a Lambda function.

D : Run a scheduled Lambda function to inspect and remediate security groups.

Answer: B

Question 2

A company runs an application on Amazon EC2 instances in an Auto Scaling group. Scale-out actionstake a long time because of long-running boot scripts. The CloudOps engineer must reduce scale-outtime without overprovisioning.Which solution will meet these requirements?

A : Change the launch configuration to use a larger instance size.

B : Increase the minimum number of instances in the Auto Scaling group.

C : Add a predictive scaling policy to the Auto Scaling group.

D : Add a warm pool to the Auto Scaling group.

Answer: D

Question 3

A company runs an application on Amazon EC2 that connects to an Amazon Aurora PostgreSQL database. A developer accidentally drops a table from the database, causing application errors. Two hours later, aCloudOps engineer needs to recover the data and make the application functional again.Which solution will meet this requirement?

A : Use the Aurora Backtrack feature to rewind the database to a specified time, 2 hours in the past.

B : Perform a point-in-time recovery on the existing database to restore the database to a specified point in time, 2 hours in the past.

C : Perform a point-in-time recovery and create a new database to restore the database to a specified pointin time, 2 hours in the past. Reconfigure the application to use a new database endpoint.

D : Create a new Aurora cluster. Choose the Restore data from S3 bucket option. Choose log files up to thefailure time 2 hours in the past.

Answer: C

Question 4

A CloudOps engineer has successfully deployed a VPC with an AWS CloudFormation template. TheCloudOps engineer wants to deploy the same template across multiple accounts that are managedthrough AWS Organizations.Which solution will meet this requirement with the LEAST operational overhead?

A : Assume the OrganizationAccountAccessRole IAM role from the management account. Deploy thetemplate in each of the accounts.

B : Create an AWS Lambda function to assume a role in each account. Deploy the template by usingthe AWS CloudFormation CreateStack API call.

C : Create an AWS Lambda function to query for a list of accounts. Deploy the template by using theAWS CloudFormation CreateStack API call.

D : Use AWS CloudFormation StackSets from the management account to deploy the template ineach of the accounts.

Answer: D

Question 5

A company that uses AWS Organizations recently implemented AWS Control Tower. The company nowneeds to centralize identity management. A CloudOps engineer must federate AWS IAM Identity Center withan external SAML 2.0 identity provider (IdP) to centrally manage access to all AWS accounts and cloudapplications.Which prerequisites must the CloudOps engineer have so that the CloudOps engineer can connect to theexternal IdP? (Select TWO.)

A : A copy of the IAM Identity Center SAML metadata

B : The IdP metadata, including the public X.509 certificate

C : The IP address of the IdP

D : Root access to the management account

E : Administrative permissions to the member accounts of the organization

Answer: A,B

Page: 1 / 31

Total 152 Questions | Updated On: Jan 29, 2026

Add To Cart