SOA-C03 Free Practice Test

A company??s Amazon EC2 instance with high CPU utilization is a t3.large instance running a test web app. The company determines the app would run better on a compute-optimized large instance.
What should the CloudOps engineer do?

1. A. Migrate the EC2 instance to a compute optimized instance by using AWS VM Import/Export.
2. B. Enable hibernation on the EC2 instanc
3. C. Change the instance type to a compute optimized instanc
4. D. Disable hibernation on the EC2 instance.
5. E. Stop the EC2 instanc
6. F. Change the instance type to a compute optimized instanc
7. G. Start the EC2 instance.
8. H. Change the instance type to a compute optimized instance while the EC2 instance is running.

Correct Answer: C

A company has a multi-account AWS environment that includes the following:
• A central identity account that contains all IAM users and groups
• Several member accounts that contain IAM roles
A SysOps administrator must grant permissions for a particular IAM group to assume a role in one of the member accounts. How should the SysOps administrator accomplish this task?

1. A. In the member account, add sts:AssumeRole permissions to the role's polic
2. B. In the identity account, add a trust policy to the group that specifies the account number of the member account.
3. C. In the member account, add the group Amazon Resource Name (ARN) to the role's trust polic
4. D. In the identity account, add an inline policy to the group with sts:AssumeRole permissions.
5. E. In the member account, add the group Amazon Resource Name (ARN) to the role's trust polic
6. F. In the identity account, add an inline policy to the group with sts:PassRole permissions.
7. G. In the member account, add the group Amazon Resource Name (ARN) to the role's inline polic
8. H. In the identity account, add a trust policy to the group with sts:AssumeRole permissions.

Correct Answer: B

A company runs applications on Amazon EC2 instances. The company wants to ensure that SSH ports on the EC2 instances are never open. The company has enabled AWS Config and has set up the restricted-ssh AWS managed rule.
A CloudOps engineer must implement a solution to remediate SSH port access for noncompliant security groups.
What should the engineer do to meet this requirement with the MOST operational efficiency?

1. A. Configure the AWS Config rule to identify noncompliant security group
2. B. Configure the rule to use the AWS-PublishSNSNotification AWS Systems Manager Automation runbook to send notifications about noncompliant resources.
3. C. Configure the AWS Config rule to identify noncompliant security group
4. D. Configure the rule to use the AWS-DisableIncomingSSHOnPort22 AWS Systems Manager Automation runbook to remediate noncompliant resources.
5. E. Make an AWS Config API call to search for noncompliant security group
6. F. Disable SSH access for noncompliant security groups by using a Deny rule.
7. G. Configure the AWS Config rule to identify noncompliant security group
8. H. Manually update each noncompliant security group to remove the Allow rule.

Correct Answer: B

To comply with regulations, a SysOps administrator needs to back up an Amazon EC2 Amazon Machine Image (AMI) to an Amazon S3 bucket. If the SysOps administrator restores the AMI from the bucket in the future, the AMI must use the same AMI image ID as the original AMI.
Which solution will meet this requirement?

1. A. Create a copy of the AM
2. B. Specify the destination S3 bucke
3. C. Set the launch permissionsto implicit.
4. D. Archive the snapshot that is associated with the AM
5. E. Specify the S3 bucket as the archive destination.
6. F. Create a store image tas
7. G. Specify the image ID and the destination S3 bucket.
8. H. Use the AWS CLI copy-image comman
9. I. Specify the image ID and the destination S3 bucket.

Correct Answer: C

A CloudOps engineer creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions. The CloudOps engineer also creates an Amazon CloudWatch dashboard by using the AWS Management Console. Each deployment of the application requires its own CloudWatch dashboard.
How can the CloudOps engineer automate the creation of the CloudWatch dashboard each time the application is deployed?

1. A. Create a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboar
2. B. Run the command each time a new CloudFormation stack is created.
3. C. Export the existing CloudWatch dashboard as JSO
4. D. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resourc
5. E. Include the exported JSON in the resource's DashboardBody property.
6. F. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resourc
7. G. Use the intrinsic Ref function to reference the ID of the existing CloudWatch dashboard.
8. H. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resourc
9. I. Specify the name of the existing dashboard in the DashboardName property.

Correct Answer: B