Free Amazon SOA-C03 Exam Questions

Question 1

A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWSaccount in the company, managed by a different CloudOps engineer.Which action can the CloudOps engineer in the second account perform?

A : Add a product from the imported portfolio to a local portfolio.

B : Add new products to the imported portfolio.

C : Change the launch role for the products contained in the imported portfolio.

D : Customize the products in the imported portfolio.

Answer: A

Question 2

A company plans to host an application on Amazon EC2 instances distributed across multipleAvailability Zones. The application must scale to millions of requests per second and handle suddenand volatile traffic patterns. The solution must use a single static IP address per Availability Zone.Which solution will meet these requirements?

A : Amazon Simple Queue Service (Amazon SQS)

B : Application Load Balancer

C : AWS Global Accelerator

D : Network Load Balancer

Answer: C

Question 3

A company plans to host an application on Amazon EC2 instances distributed across multipleAvailability Zones. The application must scale to millions of requests per second and handle suddenand volatile traffic patterns. The solution must use a single static IP address per Availability Zone.Which solution will meet these requirements?

A : Amazon Simple Queue Service (Amazon SQS)

B : Application Load Balancer

C : AWS Global Accelerator

D : Network Load Balancer

Answer: C

Question 4

A company hosts an FTP server on EC2 instances. AWS Security Hub sends findings to AmazonEventBridge when the FTP port becomes publicly exposed in attached security groups.A CloudOps engineer needs an automated, event-driven remediation solution to remove public access fromsecurity groups.Which solution will meet these requirements?

A : Configure the existing EventBridge event to stop the EC2 instances that have the exposed port.

B : Create a cron job for the FTP server to invoke an AWS Lambda function. Configure the Lambdafunction to modify the security group of the identified EC2 instances and to remove the instances thatallow public access.

C : Create a cron job for the FTP server that invokes an AWS Lambda function. Configure the Lambdafunction to modify the server to use SFTP instead of FTP.

D : Configure the existing EventBridge event to invoke an AWS Lambda function. Configure the functionto remove the security group rule that allows public access.

Answer: D

Question 5

A company is migrating its production file server to AWS. All data stored on the file server mustremain accessible if an Availability Zone becomes unavailable or during system maintenance. Usersmust access the file server through the SMB protocol and manage permissions by using WindowsACLs.Which solution will meet these requirements?

A : Create a single AWS Storage Gateway file gateway.

B : Create an Amazon FSx for Windows File Server Multi-AZ file system.

C : Deploy two AWS Storage Gateway file gateways in two Availability Zones behind an ApplicationLoad Balancer.

D : Deploy two Amazon FSx for Windows File Server Single-AZ file systems and configure DFSReplication.

Answer: B