100% Free SOA-C03 Practice Exam Questions and Answers

Stay Ahead with Latest SOA-C03 AWS Certified Specialty Practice Test Questions 2026

Page: 1 / 45

Total 221 Questions | Updated On: Sep 25, 2026

Add To Cart

Question 1

A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. AmazonEC2 instances that were launched in the private subnet cannot access the internet. The defaultnetwork ACL is active on all subnets in the VPC, and all security groups allow outbound traffic.Which solution will provide the EC2 instances in the private subnet with access to the internet?

A : Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.

B : Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.

C : Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.

D : Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Answer: A

Question 2

A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The companys new security policy requires all AWS resources to be encrypted at rest and in transit. What should a CloudOps engineer do to encrypt the database?

A : Configure encryption on the existing DB instance.

B : Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.

C : Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.

D : Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy

Answer: D

Question 3

A medical research company uses an Amazon Bedrock powered AI assistant with agents andknowledge bases to provide physicians quick access to medical study protocols. The company needsto generate audit reports that contain user identities, usage data for Bedrock agents, access data forknowledge bases, and interaction parameters.Which solution will meet these requirements?

A : Use AWS CloudTrail to log API events from generative AI workloads. Store the events in CloudTrail Lake. Use SQL-like queries to generate reports.

B : Use Amazon CloudWatch to capture generative AI application logs. Stream the logs to Amazon OpenSearch Service. Use an OpenSearch dashboard visualization to generate reports.

C : Use Amazon CloudWatch to log API events from generative AI workloads. Send the events to an Amazon S3 bucket. Use Amazon Athena queries to generate reports.

D : Use AWS CloudTrail to capture generative AI application logs. Stream the logs to Amazon Managed Service for Apache Flink. Use SQL queries to generate reports.

Answer: A

Question 4

A companys Amazon EC2 instance with high CPU utilization is a t3.large instance running a test webapp. The company determines the app would run better on a compute-optimized large instance.What should the CloudOps engineer do?

A : Migrate the EC2 instance to a compute optimized instance by using AWS VM Import/Export.

B : Enable hibernation on the EC2 instance. Change the instance type to a compute optimized instance. Disable hibernation on the EC2 instance.

C : Stop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.

D : Change the instance type to a compute optimized instance while the EC2 instance is running.

Answer: C

Question 5

A CloudOps engineer has created an AWS Service Catalog portfolio and shared it with a second AWSaccount in the company, managed by a different CloudOps engineer.Which action can the CloudOps engineer in the second account perform?

A : Add a product from the imported portfolio to a local portfolio.

B : Add new products to the imported portfolio.

C : Change the launch role for the products contained in the imported portfolio.

D : Customize the products in the imported portfolio.

Answer: A

Page: 1 / 45

Total 221 Questions | Updated On: Sep 25, 2026

Add To Cart