SOA-C03 Free Practice Test

A CloudOps engineer is examining the following AWS CloudFormation template: AWSTemplateFormatVersion: '2010-09-09'
Description: 'Creates an EC2 Instance' Resources:
EC2Instance:
Type: AWS::EC2::Instance Properties:
ImageId: ami-79fd7eee InstanceType: m5n.large SubnetId: subnet-1abc3d3fg
PrivateDnsName: ip-10-24-34-0.ec2.internal Tags:
- Key: Name
Value: !Sub "${AWS::StackName} Instance" Why will the stack creation fail?

1. A. The Outputs section of the CloudFormation template was omitted.
2. B. The Parameters section of the CloudFormation template was omitted.
3. C. The PrivateDnsName cannot be set from a CloudFormation template.
4. D. The VPC was not specified in the CloudFormation template.

Correct Answer: C

A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A CloudOps engineer must make the application highly available.
Which action should the CloudOps engineer take to meet this requirement?

1. A. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
2. B. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
3. C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
4. D. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Correct Answer: C

A company deploys AWS infrastructure in a VPC that has an internet gateway. The VPC has public subnets and private subnets. An Amazon RDS for MySQL DB instance is deployed in a private subnet. An AWS Lambda function uses the same private subnet and connects to the DB instance to query data.
A developer modifies the Lambda function to require the function to publish messages to an Amazon Simple Queue Service (Amazon SQS) queue. After these changes, the Lambda function times out when it tries to publish messages to the SQS queue.
Which solutions will resolve this issue? (Select TWO.)

1. A. Reconfigure the Lambda function so that the function is not connected to the VPC.
2. B. Deploy an RDS prox
3. C. Configure the Lambda function to connect to the DB instance through the proxy.
4. D. Deploy a NAT gatewa
5. E. Update the private subnet's route table to route all traffic to the NAT gateway.
6. F. Create an interface VPC endpoint for Amazon SQS in the VPC.
7. G. Create a gateway endpoint for Amazon SQS in the VPC.

Correct Answer: CD

An AWS CloudFormation template creates an Amazon RDS instance. This template is used to build up development environments as needed and then delete the stack when the environment is no longer required. The RDS-persisted data must be retained for further use, even after the CloudFormation stack is deleted.
How can this be achieved in a reliable and efficient way?

1. A. Write a script to continue backing up the RDS instance every five minutes.
2. B. Create an AWS Lambda function to take a snapshot of the RDS instance, and manually invoke the function before deleting the stack.
3. C. Use the Snapshot Deletion Policy in the CloudFormation template definition of the RDS instance.
4. D. Create a new CloudFormation template to perform backups of the RDS instance, and run this template before deleting the stack.

Correct Answer: C

A company maintains a list of 75 approved Amazon Machine Images (AMIs) that can be used across an organization in AWS Organizations. The company's development team has been launching Amazon EC2 instances from unapproved AMIs.
A SysOps administrator must prevent users from launching EC2 instances from unapproved AMIs.
Which solution will meet this requirement?

1. A. Add a tag to the approved AMI
2. B. Create an IAM policy that includes a tag condition that allows users to launch EC2 instances from only the tagged AMIs.
3. C. Create a service-linked rol
4. D. Attach a policy that denies the ability to launch EC2 instances from a list of unapproved AMI
5. E. Assign the role to users.
6. F. Use AWS Config with an AWS Lambda function to check for EC2 instances that are launched from unapproved AMI
7. G. Program the Lambda function to send an Amazon Simple Notification Service (Amazon SNS) message to the SysOps administrator to terminate those EC2 instances.
8. H. Use AWS Trusted Advisor to check for EC2 instances that are launched from unapproved AMI
9. I. Configure Trusted Advisor to invoke an AWS Lambda function to terminate those EC2 instances.

Correct Answer: A