Free Practice Amazon SOA-C03 Exam Questions 2026

Stay ahead with 100% Free AWS Certified CloudOps Engineer - Associate SOA-C03 Dumps Practice Questions

Page: 1 / 34

Total 166 Questions | Updated On: Mar 03, 2026

Add To Cart

Question 1

A CloudOps engineer is maintaining a web application that uses an Amazon CloudFront webdistribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All serviceshave logging enabled. The CloudOps engineer needs to investigate HTTP Layer 7 status codes fromthe web application.Which log sources contain the status codes? (Select TWO.)

A : VPC Flow Logs

B : AWS CloudTrail logs

C : ALB access logs

D : CloudFront access logs

E : RDS logs

Answer: C,D

Question 2

A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWSaccount in the company, managed by a different CloudOps engineer.Which action can the CloudOps engineer in the second account perform?

A : Add a product from the imported portfolio to a local portfolio.

B : Add new products to the imported portfolio.

C : Change the launch role for the products contained in the imported portfolio.

D : Customize the products in the imported portfolio.

Answer: A

Question 3

A company uses AWS Organizations to manage its AWS environment. The company implements a processthat uses prebuilt Amazon Machine Images (AMIs) to launch instances as a security measure. All AMIs aretagged automatically with a key named ApprovedAMI.The company wants to ensure that employees can use only the approved prebuilt AMIs to launch newinstances.Which solution will meet this requirement?

A : Implement a tag policy for the company's organization to require users to set the ApprovedAMI tag tolaunch new EC2 instances.

B : Implement an IAM policy that includes an aws:ResourceTag/ApprovedAMI condition.

C : Set up an AWS Config required-tags rule to prevent users from launching any nonapproved AMIs.

D : Use Amazon GuardDuty to constantly monitor DefenseEvasion:EC2/UnusualDoHActivity findings.

Answer: B

Question 4

A companys security policy prohibits connecting to Amazon EC2 instances through SSH and RDP.Instead, staff must use AWS Systems Manager Session Manager. Users report they cannot connect toone Ubuntu instance, even though they can connect to others.What should a CloudOps engineer do to resolve this issue?

A : Add an inbound rule for port 22 in the security group associated with the Ubuntu instance.

B : Assign the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile for the Ubuntu instance.

C : Configure the SSM Agent to log in with a user name of "ubuntu".

D : Generate a new key pair, configure Session Manager to use this new key pair, and provide the private key to the users.

Answer: B

Question 5

A company plans to host an application on Amazon EC2 instances distributed across multipleAvailability Zones. The application must scale to millions of requests per second and handle suddenand volatile traffic patterns. The solution must use a single static IP address per Availability Zone.Which solution will meet these requirements?

A : Amazon Simple Queue Service (Amazon SQS)

B : Application Load Balancer

C : AWS Global Accelerator

D : Network Load Balancer

Answer: C

Page: 1 / 34

Total 166 Questions | Updated On: Mar 03, 2026

Add To Cart