Home Certifications Editorials

Exam overview and study plan

CloudOps SOA-C03 Practice Questions

Certified CloudOps Engineer - Associate

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 155 free questions

155 questions in this view

Page 1 of 26

Question 1

A company has two VPC networks named VPC A and VPC B. The VPC A CIDR block is 10.0.0.0/16 and the VPC B CIDR block is 172.31.0.0/16. The company wants to establish a VPC peering connection named pcx-12345 between both VPCs.

Which rules should appear in the route table of VPC A after configuration? (Select TWO.)

Destination: 10.0.0.0/16, Target: Local
Destination: 172.31.0.0/16, Target: Local
Destination: 10.0.0.0/16, Target: pcx-12345
Destination: 172.31.0.0/16, Target: pcx-12345
Destination: 10.0.0.0/16, Target: 172.31.0.0/16

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A company runs applications that generate log files. The company stores the log files in Amazon S3. A CloudOps engineer must automatically process the log files whenever new files upload to the S3 bucket.

Which solution will meet this requirement?

Configure an Amazon CloudWatch event rule that triggers on S3 PUT events and invokes an AWS Lambda function.
Create a pipeline in AWS CodePipeline with a source stage that monitors the S3 bucket for new files and invokes an AWS Lambda function.
Configure an S3 event notification to invoke an AWS Lambda function to process the new log files.
Create an AWS Step Functions state machine with a wait state that monitors the S3 bucket for new files and invokes an AWS Lambda function.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A company hosts an application on Amazon EC2 instances. The instances are in an Amazon EC2 Auto Scaling group that uses a launch template. The amount of application traffic changes throughout the day. Scaling events happen frequently.

A CloudOps engineer needs to help developers troubleshoot the application. When a scaling event removes an instance, EC2 Auto Scaling terminates the instance before the developers can log in to the instance to diagnose issues.

Which solution will prevent termination of the instance so that the developers can log in to the instance?

Ensure that the Delete on termination setting is turned off in the UserData section of the launch template.
Update the Auto Scaling group by enabling instance scale-in protection for newly launched instances.
Use Amazon Inspector to configure a rules package to protect the instances from termination.
Use Amazon GuardDuty to configure rules to protect the instances from termination.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A company asks a CloudOps engineer to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses IAM to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file.

What is the MOST operationally efficient solution that meets these requirements?

Create an Amazon EventBridge rule that invokes an AWS Lambda function when a new file is delivered. Configure the Lambda function to compute an MD5 hash check on the file and store the result in an Amazon DynamoDB table. The security team can use the values that are stored in DynamoDB to verify the integrity of the delivered files.
Create an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket. Configure the Lambda function to compute an MD5 hash check on the file and store the result as a tag in an Amazon S3 object. The security team can use the information in the tag to verify the integrity of the delivered files.
Enable the CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that grants the security team access to the file integrity logs that are stored in the S3 bucket.
Enable the CloudTrail file integrity feature on the trail. The security team can use the digest file that is created by CloudTrail to verify the integrity of the delivered files.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A web application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). During rolling updates, application initialization and cold starts cause 30-second latency spikes.

A CloudOps engineer needs to keep latency flat by pre-initializing capacity. The CloudOps engineer must reuse instances across waves without extending the maintenance window.

Which solution will meet these requirements?

Configure an Auto Scaling group warm pool with stopped instances that are pre-initialized through user data. Enable instance reuse. Set a target tracking policy with an instance warmup value. Run instance refresh in batches so the replacements pull from the warm pool.
Double the health-check grace period. Disable connection draining. Use step scaling to absorb spikes during each wave. Move to more and smaller instances.
Place a Network Load Balancer in front of the ALB to absorb burst connections. Keep the Auto Scaling group maximum unchanged. Configure zero-surge rolling replacements. Disable instance reuse.
Enable predictive scaling with a 7-day forecast on the Auto Scaling group. Overlay a CPU target-tracking policy with a 300-second instance warmup. Add scheduled actions for the rollout window. Maintain zero-surge instance refresh with standard ALB health checks.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A gaming company runs a mobile game application. The application uses a database on Amazon RDS for Microsoft SQL Server Enterprise Edition. During peak gaming hours, the database experiences high read traffic that degrades performance. Additionally, the database's allocated storage is approaching its maximum capacity because of rapid data growth.

A CloudOps engineer needs to implement a solution to improve database performance and accommodate the data growth.

Which combination of steps will meet these requirements MOST cost-effectively? (Select TWO.)

Create a read replica to distribute the peak read traffic. Configure the application to direct read operations to the read replica endpoint.
Resize the database to a larger instance class during peak hours. Scale down to the original instance class during off-peak hours.
Enable Multi-AZ deployment to distribute the read workload across multiple Availability Zones.
Enable storage auto scaling. Configure a maximum storage threshold to accommodate the growing data.
Migrate the database to a larger instance class that uses Provisioned IOPS SSD (io1) storage.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 26

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.