← Back to exam page

Free AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 – Amazon AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 Practice Test Question

Loading demo links...

Showing 10–12 of 13 questions

Question 10 (Topic 1)

A company uses an organization in AWS Organizations to manage a multi-account AWS environment. The company creates a new Amazon EBS backed Amazon Machine Image (AMI). The company shares the AMI across the organization. Employees must use the AMI to launch all new Linux-based Amazon EC2 instances across the entire organization. In one of the company's application accounts, an employee uses the new AMI to launch a new workload. The EC2 instance launches, but it is terminated immediately. What the MOST likely reason that the instance did not fully boot?

Select an option, then click Submit answer.

  • ○ The user who launched the instance does not have ec2:RunInstances permissions within the application account.
  • ○ The company encrypted the AMI by using an AWS KMS key that the user who launched the EC2 instance does not have access to.
  • ○ There is a service control policy (SCP) that denies the user who launched the EC2 instance access to launch instances in the application account.
  • ○ The user launched the EC2 instance into a subnet that does not have access to the internet.
Question 11 (Topic 1)

A CloudOps engineer is unable to launch Amazon EC2 instances into a VPC because there are no available private IPv4 addresses in the VPC. Which combination of actions must the CloudOps engineer take to launch the instances? (Choose two.)

Select an option, then click Submit answer.

  • ○ Associate a secondary IPv4 CIDR block with the VPC.
  • ○ Associate a primary IPv6 CIDR block with the VPC.
  • ○ Create a new subnet for the VPC.
  • ○ Modify the CIDR block of the VPC.
  • ○ Modify the CIDR block of the subnet that is associated with the instances.
Question 12 (Topic 1)

A company uses AWS Systems Manager to automate tasks across AWS accounts. The company uses monitoring tools to detect issues. The company creates a Systems Manager Automation runbook that runs an AWS Lambda function to remediate the issues. Initially, the company runs the runbook manually. Now, the company wants to automate running the runbook whenever the monitoring tools detect issues. Which solution will meet this requirement?

Select an option, then click Submit answer.

  • ○ Configure the monitoring tools to publish findings to Amazon EventBridge. Create an EventBridge rule that invokes the runbook in response to events from the monitoring tools.
  • ○ Configure the monitoring tools to send findings to an Amazon SNS topic. Subscribe the runbook to the SNS topic. Invoke the runbook when a message is received.
  • ○ Configure the monitoring tools to write findings to Amazon CloudWatch Logs. Create a CloudWatch Logs subscription filter that invokes the runbook when new log entries are detected.
  • ○ Configure AWS Config to assess the resources and publish configuration changes to Amazon EventBridge. Create a rule to invoke the runbook in response to configuration change events.