← Back to exam page

Free AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 – Amazon AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 Practice Test Question

Loading demo links...

Showing 4–6 of 13 questions

Question 4 (Topic 1)

A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed. Users must be able to interact with the file server through the SMB protocol Users also must have the ability to manage file permissions by using Windows ACLs. Which solution will meet these requirements?

Select an option, then click Submit answer.

  • ○ Create a single AWS Storage Gateway file gateway.
  • ○ Create an Amazon FSx for Windows File Server Multi-AZ file system.
  • ○ Deploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.
  • ○ Deploy two Amazon FSx for Windows File Server Single-AZ 2 file systems Configure Microsoft Distributed File System Replication (DFSR).
Question 5 (Topic 1)

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log group. The company’s security team asks for a count of application errors, grouped by type, across all of the log groups. What should a CloudOps engineer do to meet this requirement?

Select an option, then click Submit answer.

  • ○ Perform a CloudWatch Logs Insights query that uses the stats command and count function.
  • ○ Perform a CloudWatch Logs search that uses the groupby keyword and count function.
  • ○ Perform an Amazon Athena query that uses the SELECT and GROUP BV keywords.
  • ○ Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.
Question 6 (Topic 1)

A company's security policy requires incoming SSH traffic to be restricted to a defined set of addresses. The company is using an AWS Config rule to check whether security groups allow unrestricted incoming SSH traffic. A CloudOps engineer discovers a noncompliant resource and fixes the security group manually. The CloudOps engineer wants to automate the remediation of other noncompliant resources. What is the MOST operationally efficient solution that meets these requirements?

Select an option, then click Submit answer.

  • ○ Create an Amazon CloudWatch alarm for the AWS Config rule's status metric. Create an AWS Lambda function that can remove the noncompliant rule from the security group. Configure the alarm action to invoke the Lambda function.
  • ○ Configure an automatic remediation action on the AWS Config rule. Specify the AWS-DisablolncomingSSHOnPort22 remediation action.
  • ○ Configure an Amazon EventBridge rule for AWS Config configuration item change events. Create an AWS Lambda function that can remove the noncompliant rule from the security group Configure the rule to invoke the Lambda function.
  • ○ Create an AWS Lambda function that can analyze a security group’s inbound rules to check for unrestricted SSH access. Configure the Lambda function to remove the noncompliant rule from the security group. Configure an Amazon EventBridge rule to invoke the Lambda function every hour.