Free Amazon SOA-C03 Exam Questions

Question 1

A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. AmazonEC2 instances that were launched in the private subnet cannot access the internet. The defaultnetwork ACL is active on all subnets in the VPC, and all security groups allow outbound traffic.Which solution will provide the EC2 instances in the private subnet with access to the internet?

A : Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.

B : Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.

C : Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.

D : Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Answer: A

Question 2

A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWSaccount in the company, managed by a different CloudOps engineer.Which action can the CloudOps engineer in the second account perform?

A : Add a product from the imported portfolio to a local portfolio.

B : Add new products to the imported portfolio.

C : Change the launch role for the products contained in the imported portfolio.

D : Customize the products in the imported portfolio.

Answer: A

Question 3

A company runs an application on Amazon EC2 that connects to an Amazon Aurora PostgreSQL database. A developer accidentally drops a table from the database, causing application errors. Two hours later, aCloudOps engineer needs to recover the data and make the application functional again.Which solution will meet this requirement?

A : Use the Aurora Backtrack feature to rewind the database to a specified time, 2 hours in the past.

B : Perform a point-in-time recovery on the existing database to restore the database to a specified point in time, 2 hours in the past.

C : Perform a point-in-time recovery and create a new database to restore the database to a specified pointin time, 2 hours in the past. Reconfigure the application to use a new database endpoint.

D : Create a new Aurora cluster. Choose the Restore data from S3 bucket option. Choose log files up to thefailure time 2 hours in the past.

Answer: C

Question 4

A medical research company uses an Amazon Bedrock powered AI assistant with agents andknowledge bases to provide physicians quick access to medical study protocols. The company needsto generate audit reports that contain user identities, usage data for Bedrock agents, access data forknowledge bases, and interaction parameters.Which solution will meet these requirements?

A : Use AWS CloudTrail to log API events from generative AI workloads. Store the events in CloudTrail Lake. Use SQL-like queries to generate reports.

B : Use Amazon CloudWatch to capture generative AI application logs. Stream the logs to Amazon OpenSearch Service. Use an OpenSearch dashboard visualization to generate reports.

C : Use Amazon CloudWatch to log API events from generative AI workloads. Send the events to an Amazon S3 bucket. Use Amazon Athena queries to generate reports.

D : Use AWS CloudTrail to capture generative AI application logs. Stream the logs to Amazon Managed Service for Apache Flink. Use SQL queries to generate reports.

Answer: A

Question 5

A company's security policy requires incoming SSH traffic to be restricted to a defined set ofaddresses. The company is using an AWS Config rule to check whether security groups allowunrestricted incoming SSH traffic.A CloudOps engineer discovers a noncompliant resource and fixes the security group manually. TheCloudOps engineer wants to automate the remediation of other noncompliant resources.What is the MOST operationally efficient solution that meets these requirements?

A : Create a CloudWatch alarm for the AWS Config rule and invoke a Lambda function to remediate.

B : Configure an automatic remediation action on the AWS Config rule using AWSDisableIncomingSSHOnPort22.

C : Create an EventBridge rule for AWS Config events and invoke a Lambda function.

D : Run a scheduled Lambda function to inspect and remediate security groups.

Answer: B