← Back to exam page

Free AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 – Amazon AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 Practice Test Question

Loading demo links...

Showing 1–3 of 13 questions

Question 1 (Topic 1)

A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs However, there are no logs in CloudWatch Logs. What could be blocking the VPC flow logs from being published to CloudWatch Logs?

Select an option, then click Submit answer.

  • ○ The IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.
  • ○ The IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.
  • ○ The VPC is configured for IPv6 addresses.
  • ○ The VPC is peered with another VPC in the AWS account
Question 2 (Topic 1)

A company runs a business application on more than 300 Linux-based instances. Each instance has the AWS Systems Manager Agent (SSM Agent) installed. The company expects the number of instances to grow in the future. All business application instances have the same user-defined tag. A CloudOps engineer wants to run a command on all the business application instances to download and install a package from a private repository. To avoid overwhelming the repository, the CloudOps engineer wants to ensure that no more than 30 downloads occur at one time. Which solution will meet this requirement in the MOST operationally efficient way?

Select an option, then click Submit answer.

  • ○ Use a secondary tag to create 10 batches of 30 instances each. Use a Systems Manager Run Command document to download and install the package. Specify the target as part of the Run Command document by using the secondary tag. Run each batch one time.
  • ○ Use an AWS Lambda function to automatically run a Systems Manager Run Command document that roads a list of instance IDs that have the user-defined tag. Set reserved concurrency for the Lambda function to 30.
  • ○ Use a Systems Manager Run Command document to download and install the package. Use rate control to set concurrency to 30. Specify the target by using the user-defined tag as part of the Run Command document.
  • ○ Use a parallel workflow state in AWS Step Functions to automatically run a Systems Manager Run Command document that reads a list of instance IDs that have the user-defined tag. Set the number of parallel states to 30. Run the Step Functions workflow 10 times.
Question 3 (Topic 1)

A CloudOps engineer has successfully deployed a VPC with an AWS CloudFormation template The CloudOps engineer wants to deploy the same template across multiple accounts that are managed through AWS Organizations. Which solution will meet this requirement with the LEAST operational overhead?

Select an option, then click Submit answer.

  • ○ Assume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.
  • ○ Create an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.
  • ○ Create an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.
  • ○ Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.