Free Amazon SOA-C03 Exam Questions

Question 1

A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWSaccount in the company, managed by a different CloudOps engineer.Which action can the CloudOps engineer in the second account perform?

A : Add a product from the imported portfolio to a local portfolio.

B : Add new products to the imported portfolio.

C : Change the launch role for the products contained in the imported portfolio.

D : Customize the products in the imported portfolio.

Answer: A

Question 2

A company has an AWS CloudFormation template that creates an Amazon S3 bucket. A user authenticates to the corporate AWS account with their Active Directory credentials and attempts to deploy the CloudFormation template. However, the stack creation fails. Which factors could cause this failure? (Select TWO.)

A : The users IAM policy does not allow the cloudformation:CreateStack action.

B : The users IAM policy does not allow the cloudformation:CreateStackSet action.

C : The users IAM policy does not allow the s3:CreateBucket action.

D : The users IAM policy explicitly denies the s3:ListBucket action.

E : The users IAM policy explicitly denies the s3:PutObject action.

Answer: A,C

Question 3

A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. AmazonEC2 instances that were launched in the private subnet cannot access the internet. The defaultnetwork ACL is active on all subnets in the VPC, and all security groups allow outbound traffic.Which solution will provide the EC2 instances in the private subnet with access to the internet?

A : Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.

B : Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.

C : Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.

D : Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Answer: A

Question 4

Optimization]A companys architecture team must receive immediate email notifications whenever new AmazonEC2 instances are launched in the companys main AWS production account.What should a CloudOps engineer do to meet this requirement?

A : Create a user data script that sends an email message through a smart host connector. Include the architecture team's email address in the user data script as the recipient. Ensure that all new EC2 instances include the user data script as part of a standardized build process.

B : Create an Amazon Simple Notification Service (Amazon SNS) topic and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SNS topic as the rule's target.

C : Create an Amazon Simple Queue Service (Amazon SQS) queue and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SQS queue as the rule's target.

D : Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure AWS Systems Manager to publish EC2 events to the SNS topic. Create an AWS Lambda function to poll the SNS topic. Configure the Lambda function to send any messages to the architecture team's email address.

Answer: B

Question 5

A company hosts an FTP server on EC2 instances. AWS Security Hub sends findings to AmazonEventBridge when the FTP port becomes publicly exposed in attached security groups.A CloudOps engineer needs an automated, event-driven remediation solution to remove public access fromsecurity groups.Which solution will meet these requirements?

A : Configure the existing EventBridge event to stop the EC2 instances that have the exposed port.

B : Create a cron job for the FTP server to invoke an AWS Lambda function. Configure the Lambdafunction to modify the security group of the identified EC2 instances and to remove the instances thatallow public access.

C : Create a cron job for the FTP server that invokes an AWS Lambda function. Configure the Lambdafunction to modify the server to use SFTP instead of FTP.

D : Configure the existing EventBridge event to invoke an AWS Lambda function. Configure the functionto remove the security group rule that allows public access.

Answer: D