AWS Certified CloudOps Engineer - Associate Question and Answers

AWS Certified CloudOps Engineer - Associate

Last Update Jun 5, 2026
Total Questions : 219

We are offering FREE SOA-C03 Amazon Web Services exam questions. All you do is to just go and sign up. Give your details, prepare SOA-C03 free exam questions and then go for complete pool of AWS Certified CloudOps Engineer - Associate test questions that will help you more.

SOA-C03 PDF

$36.75 ~~$104.99~~

Add to Cart

SOA-C03 Testing Engine

$43.75 ~~$124.99~~

Add to Cart

SOA-C03 PDF + Testing Engine

$57.75 ~~$164.99~~

Add to Cart

Questions 1

An AWS CloudFormation template creates an Amazon RDS instance. This template is used to build up development environments as needed and then delete the stack when the environment is no longer required. The RDS-persisted data must be retained for further use, even after the CloudFormation stack is deleted.

How can this be achieved in a reliable and efficient way?

Options:

Write a script to continue backing up the RDS instance every five minutes.

Create an AWS Lambda function to take a snapshot of the RDS instance, and manually invoke the function before deleting the stack.

Use the Snapshot Deletion Policy in the CloudFormation template definition of the RDS instance.

Create a new CloudFormation template to perform backups of the RDS instance, and run this template before deleting the stack.

Discussion 0

Questions 2

A company has a new security policy that requires all Amazon Elastic Block Store (Amazon EBS) volumes to be encrypted at rest. The company needs to use a custom key policy to manage access to the encryption keys. The company must rotate the keys once each year.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

Create AWS KMS symmetric customer managed keys. Enable automatic key rotation.

Use AWS owned AWS KMS keys across the company ' s AWS environment.

Create AWS KMS asymmetric customer managed keys. Enable automatic key rotation.

Create AWS KMS symmetric customer managed keys by using imported key material. Rotate the keys on a yearly basis.

Discussion 0

Questions 3

A company has an AWS CloudFormation template that includes an AWS::EC2::Instance resource and a custom resource (Lambda function). The Lambda function fails because it runs before the EC2 instance is launched.

Which solution will resolve this issue?

Options:

Add a DependsOn attribute to the custom resource. Specify the EC2 instance in the DependsOn attribute.

Update the custom resource ' s service token to point to a valid Lambda function.

Update the Lambda function to use the cfn-response module to send a response to the custom resource.

Use the Fn::If intrinsic function to check for the EC2 instance before the custom resource runs.

Discussion 0

Questions 4

A company hosts a production MySQL database on an Amazon Aurora single-node DB cluster. The database is queried heavily for reporting purposes. The DB cluster is experiencing periods of performance degradation because of high CPU utilization and maximum connections errors. A CloudOps engineer needs to improve the stability of the database.

Which solution will meet these requirements?

Options:

Create an Aurora Replica node. Create an Auto Scaling policy to scale replicas based on CPU utilization. Ensure that all reporting requests use the read-only connection string.

Create a second Aurora MySQL single-node DB cluster in a second Availability Zone. Ensure that all reporting requests use the connection string for this additional node.

Create an AWS Lambda function that caches reporting requests. Ensure that all reporting requests call the Lambda function.

Create a multi-node Amazon ElastiCache cluster. Ensure that all reporting requests use the ElastiCache cluster. Use the database if the data is not in the cache.

Discussion 0

Questions 5

A company uses AWS Systems Manager to automate common operational tasks across its AWS resources. The company wants to automatically collect software inventory of all its Amazon EC2 instances every day. The solution must store the data in an Amazon S3 bucket for auditing purposes.

Which solution will meet these requirements?

Options:

Create a Systems Manager association with the AWS-GatherSoftwareInventory document. Schedule the association to run every day on all EC2 instances.

Configure Systems Manager Distributor to package inventory collection software. Use Systems Manager Hybrid Activations to scan the inventory every day.

Configure Systems Manager Patch Manager to deploy inventory collection agents. Configure Systems Manager Compliance to validate inventory data.

Set up Systems Manager Session Manager to connect to EC2 instances. Use Systems Manager Fleet Manager to aggregate inventory results across the environment.

Discussion 0

Questions 6

A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts. A CloudOps engineer must implement a solution to identify and remediate all DynamoDB tables that do not have the appropriate tags.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

Create a custom AWS Lambda function to evaluate and remediate all DynamoDB tables. Create an Amazon EventBridge scheduled rule to invoke the Lambda function.

Create a custom AWS Lambda function to evaluate and remediate all DynamoDB tables. Create an AWS Config custom rule to invoke the Lambda function.

Use the required-tags AWS Config managed rule to evaluate all DynamoDB tables for the appropriate tags. Configure an automatic remediation action that uses an AWS Systems Manager Automation custom runbook.

Create an Amazon EventBridge managed rule to evaluate all DynamoDB tables for the appropriate tags. Configure the EventBridge rule to run an AWS Systems Manager Automation custom runbook for remediation.

Discussion 0

Questions 7

An ecommerce company runs a microservices application on Amazon ECS. Customers sometimes experience high latency when they attempt to complete a purchase through the application. A CloudOps engineer needs a solution to track individual transactions across multiple services to identify where latency is occurring. The solution must require minimal code changes and must provide a visual representation of service dependencies.

Which solution will meet these requirements?

Options:

Set up the AWS X-Ray daemon as a sidecar container. Instrument the application code by using the X-Ray SDK. Use the service map to visualize request flows to identify latency.

Configure an Amazon CloudWatch agent on ECS containers as a sidecar container. Create custom metrics for each service. Set up CloudWatch dashboards to monitor response times.

Use Amazon VPC Flow Logs to collect logs for microservices that run on the ECS container. Monitor network traffic, and use the service map to identify latency between microservices.

Use Amazon CloudWatch Container Insights as a sidecar container to collect container metrics. Monitor response times, and visualize request flows to identify latency.

Discussion 0

Questions 8

A company stores critical files in an Amazon S3 bucket in the us-east-1 AWS Region. To comply with disaster recovery requirements, all new objects in the bucket must automatically replicate to a bucket in the us-west-2 Region.

Which solution will meet this requirement with the LEAST operational overhead?

Options:

Enable Cross-Region Replication (CRR) on the source bucket. Specify the destination bucket in the us-west-2 Region. Enable versioning on the source bucket.

Enable Cross-Origin Resource Sharing (CORS) on both the us-east-1 bucket and the us-west-2 bucket.

Create an AWS Lambda function that copies the object to the destination bucket. Configure an Amazon EventBridge rule to run the Lambda function for each object that is created.

Enable S3 Lifecycle policies to transition objects to a different storage class in the us-west-2 Region.

Discussion 0

Questions 9

A CloudOps engineer is responsible for a company ' s disaster recovery procedures. The company has a source Amazon S3 bucket in a production account, and it wants to replicate objects from the source to a destination S3 bucket in a nonproduction account. The CloudOps engineer configures S3 cross-Region, cross-account replication to copy the source S3 bucket to the destination S3 bucket. When the CloudOps engineer attempts to access objects in the destination S3 bucket, they receive an Access Denied error.

Which solution will resolve this problem?

Options:

Modify the replication configuration to change object ownership to the destination S3 bucket owner.

Ensure that the replication rule applies to all objects in the source S3 bucket and is not scoped to a single prefix.

Retry the request when the S3 Replication Time Control (S3 RTC) has elapsed.

Verify that the storage class for the replicated objects did not change between the source S3 bucket and the destination S3 bucket.

Discussion 0

Questions 10

A CloudOps engineer is maintaining a web application that uses an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All services have logging enabled. The CloudOps engineer needs to investigate HTTP Layer 7 status codes from the web application.

Which log sources contain the status codes? (Select TWO.)

Options:

VPC Flow Logs

AWS CloudTrail logs

ALB access logs

CloudFront access logs

RDS logs

Discussion 0

Questions 11

A company runs custom statistical analysis software on a cluster of Amazon EC2 instances. The software is highly sensitive to network latency between nodes, although network throughput is not a limitation.

Which solution will minimize network latency?

Options:

Place all the EC2 instances into a cluster placement group.

Configure and assign two Elastic IP addresses for each EC2 instance.

Configure jumbo frames on all the EC2 instances in the cluster.

Place all the EC2 instances into a spread placement group in the same AWS Region.

Discussion 0

Questions 12

A company is running an ecommerce application on AWS. The application maintains many open but idle connections to an Amazon Aurora DB cluster. During times of peak usage, the database produces the following error message: " Too many connections. " The database clients are also experiencing errors.

Which solution will resolve these errors?

Options:

Increase the read capacity units (RCUs) and the write capacity units (WCUs) on the database.

Configure RDS Proxy. Update the application with the RDS Proxy endpoint.

Turn on enhanced networking for the DB instances.

Modify the DB cluster to use a burstable instance type.

Discussion 0

Questions 13

A company’s application servers in AWS account 111122223333 use a security group sg-1234abcd. They need to access a database hosted in account 444455556666. The VPCs are connected using a VPC peering connection (pcx-b04deed9).

A CloudOps engineer must configure the database’s security group to allow new connections only from the application servers.

What should the engineer do?

Options:

Add an inbound rule to the database ' s security group. Reference 111122223333/sg-1234abcd as the source.

Add an inbound rule to the database ' s security group. Reference pcx-b04deed9/sg-1234abcd as the source.

Add an inbound rule to the database ' s security group. Reference sg-1234abcd as the source.

Add an inbound rule to the database ' s security group. Reference 444455556666/sg-1234abcd as the source.

Discussion 0

Questions 14

A company hosts a static website in an Amazon S3 bucket, accessed globally via Amazon CloudFront. The Cache-Control max-age header is set to 1 hour, and Maximum TTL is set to 5 minutes. The CloudOps engineer observes that CloudFront is not caching objects for the expected duration.

What is the reason for this issue?

Options:

The Expires header has been set to 3 hours.

Cached assets are not expiring in the edge location.

Cache invalidation is missing in the CloudFront configuration.

Cache-duration settings conflict with each other.

Discussion 0

Questions 15

A company runs thousands of Amazon EC2 instances that are based on the Amazon Linux 2 Amazon Machine Image (AMI). A SysOps administrator must implement a solution to record commands and output from any user that needs an interactive session on one of the EC2 instances. The solution must log the data to a durable storage location. The solution also must provide automated notifications and alarms that are based on the log data.

Which solution will meet these requirements with the MOST operational efficiency?

Options:

Configure command session logging on each EC2 instance. Configure the unified Amazon CloudWatch agent to send session logs to Amazon CloudWatch Logs. Set up query filters and alerts by using Amazon Athena.

Require all users to use a central bastion host when they need command line access to an EC2 instance. Configure the unified Amazon CloudWatch agent on the bastion host to send session logs to Amazon CloudWatch Logs. Set up a metric filter and a metric alarm for relevant security findings in CloudWatch Logs.

Require all users to use AWS Systems Manager Session Manager when they need command line access to an EC2 instance. Configure Session Manager to stream session logs to Amazon CloudWatch Logs. Set up a metric filter and a metric alarm for relevant security findings in CloudWatch Logs.

Configure command session logging on each EC2 instance. Require all users to use AWS Systems Manager Run Command documents when they need command line access to an EC2 instance. Configure the unified Amazon CloudWatch agent to send session logs to Amazon CloudWatch Logs. Set up CloudWatch alarms that are based on Amazon Athena query results.

Discussion 0

Questions 16

A company moves workloads from public subnets to private subnets to improve security. During testing, the company discovers that servers in the private subnets cannot reach an external API. The VPC has a CIDR block of 10.0.0.0/16. The VPC contains two public subnets and two private subnets. The VPC has one internet gateway and has a NAT gateway in each of the private subnets.

The company must ensure that workloads that run in the private subnets can reach the external API.

Which solution will meet this requirement?

Options:

Deploy an outbound-only internet gateway to allow traffic from private subnets to the internet. Edit the route tables to direct outbound traffic through the outbound-only internet gateway.

Create and configure an Amazon API Gateway HTTP API as a proxy for the external API. Edit the route tables to direct outbound traffic to the HTTP API.

Deploy a new NAT gateway that has an Elastic IP address in each public subnet. Edit the route tables to direct outbound traffic through the NAT gateways.

Create a VPC interface endpoint. Edit the route tables to direct outbound traffic through the endpoint.

Discussion 0

Questions 17

A company uses an IAM policy to ensure that all AWS resources are deployed and managed by AWS CloudFormation. A CloudOps engineer must periodically audit all AWS resources and provide a list of resources that do not match the expected configuration.

Which solution will meet this requirement with the LEAST effort?

Options:

Configure an Amazon EventBridge rule that sends a notification to the company when any resource is created by CloudFormation. Audit the event notifications for any incorrect configurations.

Audit code repositories where CloudFormation code is stored to look for any deviations from the expected configuration.

Use the AWS CLI to check all resources to ensure consistency with the intended configuration.

Use Amazon EventBridge to schedule periodic invocations of CloudFormation drift detection. Capture findings for review.

Discussion 0

Questions 18

A company stores critical data in Amazon S3 buckets. A CloudOps engineer must build a solution to record all S3 API activity.

Which action will meet this requirement?

Options:

Configure S3 bucket metrics to record object access logs.

Create an AWS CloudTrail trail to log data events for all S3 objects.

Enable S3 server access logging for each S3 bucket.

Use AWS IAM Access Analyzer for Amazon S3 to store object access logs.

Discussion 0

Questions 19

A CloudOps engineer creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions. The CloudOps engineer also creates an Amazon CloudWatch dashboard by using the AWS Management Console. Each deployment of the application requires its own CloudWatch dashboard.

How can the CloudOps engineer automate the creation of the CloudWatch dashboard each time the application is deployed?

Options:

Create a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboard. Run the command each time a new CloudFormation stack is created.

Export the existing CloudWatch dashboard as JSON. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Include the exported JSON in the resource ' s DashboardBody property.

Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Use the intrinsic Ref function to reference the ID of the existing CloudWatch dashboard.

Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Specify the name of the existing dashboard in the DashboardName property.

Discussion 0

Questions 20

A company is implementing security and compliance by using AWS Trusted Advisor. The company’s CloudOps team is validating the list of Trusted Advisor checks that it can access.

Which factor will affect the quantity of available Trusted Advisor checks?

Options:

Whether at least one Amazon EC2 instance is in the running state

The AWS Support plan

An AWS Organizations service control policy (SCP)

Whether the AWS account root user has multi-factor authentication (MFA) enabled

Discussion 0

Questions 21

A company has a workload that is sending log data to Amazon CloudWatch Logs. One of the fields includes a measure of application latency. A CloudOps engineer needs to monitor the p90 statistic of this field over time.

What should the CloudOps engineer do to meet this requirement?

Options:

Create an Amazon CloudWatch Contributor Insights rule on the log data.

Create a metric filter on the log data.

Create a subscription filter on the log data.

Create an Amazon CloudWatch Application Insights rule for the workload.

Discussion 0

Questions 22

A company needs to copy an Amazon Aurora database from one AWS account to a second account that uses a second AWS Region. A CloudOps engineer must automate this process to occur every day.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

Create a backup plan in AWS Backup. Specify the second account and the second Region as the destination.

Create an Amazon EventBridge rule that runs on a schedule. Create an AWS Lambda function that runs an automation script to copy the database to the second account and the second Region. Use the EventBridge rule to invoke the Lambda function.

Configure Amazon EventBridge Scheduler with a recurring rule. Add the RDS StartExportTask API operation as a target. Specify the relevant details about the database and an Amazon S3 bucket to store the exported data. Create a replication rule for the S3 bucket to replicate data to the second account and the second Region.

Configure AWS Application Migration Service to replicate the Aurora database. Specify the second account and the second Region as the destination.

Discussion 0

Questions 23

A CloudOps engineer launches an Amazon EC2 Linux instance in a public subnet. When the instance is running, the CloudOps engineer obtains the public IP address and attempts to remotely connect to the instance multiple times. However, the CloudOps engineer always receives a timeout error.

Which action will allow the CloudOps engineer to remotely connect to the instance?

Options:

Add a route table entry in the public subnet for the CloudOps engineer’s IP address.

Add an outbound network ACL rule to allow TCP port 22 for the CloudOps engineer’s IP address.

Modify the instance security group to allow inbound SSH traffic from the CloudOps engineer’s IP address.

Modify the instance security group to allow outbound SSH traffic to the CloudOps engineer’s IP address.

Discussion 0

Questions 24

A company runs a critical application on Amazon EC2 instances. The application uses an Auto Scaling group to scale based on traffic to the application. To comply with regulations, the company must patch all EC2 instances with the latest security patches every day without any downtime.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

Use AWS Systems Manager Automation to create a patched Amazon Machine Image (AMI). Update the Auto Scaling group launch template. Initiate an instance refresh.

Use AWS CloudFormation to provision and patch a new EC2 instance. Create an AMI of the new instance. Update the Auto Scaling group launch template to use the new AMI. Use AWS Config to replace the existing instances.

Use AWS Lambda functions to launch and patch a new EC2 instance. Create an AMI of the new instance. Update the Auto Scaling group launch template to use the new AMI. Manually initiate a rolling update.

Use AWS Systems Manager Automation to create a patched AMI. Update the Auto Scaling group launch template to use the new AMI. Use AWS Config to replace the existing instances.

Discussion 0

Questions 25

A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application’s performance.

A CloudOps engineer must scale the application to meet the increased traffic.

Which solution meets these requirements?

Options:

Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.

Create an Amazon EventBridge rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.

Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy. Attach the ALB to the Auto Scaling group.

Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy. Attach the ALB to the Auto Scaling group.

Discussion 0

Questions 26

A company recently acquired another corporation and all of that corporation’s AWS accounts. A financial analyst needs the cost data from these accounts. A CloudOps engineer uses Cost Explorer to generate cost and usage reports. The CloudOps engineer notices that “No Tagkey” represents 20% of the monthly cost.

What should the CloudOps engineer do to tag the “No Tagkey” resources?

Options:

Add the accounts to AWS Organizations. Use a service control policy (SCP) to tag all the untagged resources.

Use an AWS Config rule to find the untagged resources. Set the remediation action to terminate the resources.

Use Cost Explorer to find and tag all the untagged resources.

Use Tag Editor to find and tag all the untagged resources.

Discussion 0

Questions 27

A company runs an application on hundreds of Amazon EC2 instances in three Availability Zones. The application calls a third-party API over the public internet. A CloudOps engineer must provide the third party with a list of static IP addresses so that the third party can allow traffic from the application.

Which solution will meet these requirements?

Options:

Add a NAT gateway in the public subnet of each Availability Zone. Make the NAT gateway the default route of all private subnets in those Availability Zones.

Allocate one Elastic IP address in each Availability Zone. Associate the Elastic IP address with all the instances in the Availability Zone.

Place the instances behind a Network Load Balancer (NLB). Send the traffic to the internet through the private IP address of the NLB.

Update the main route table to send the traffic to the internet through an Elastic IP address that is assigned to each instance.

Discussion 0

Questions 28

A company uses Amazon S3 for object storage. A CloudOps engineer notices that the company’s Amazon S3 usage has doubled every month across all the company’s S3 buckets for the previous year. The company stores and consumes data in the same AWS Region where the data is generated. The company never accesses data that is older than 30 days. The CloudOps engineer needs to optimize Amazon S3 costs for the company.

Which solution will meet this requirement with the LEAST operational overhead?

Options:

Create an AWS Lambda function to delete data that is older than 30 days. Use an Amazon EventBridge cron expression to invoke the function monthly.

Use S3 Storage Lens to identify objects that are older than 30 days across all S3 buckets.

Modify the object creation lifecycle to check for and delete any objects that were created more than 30 days ago.

Configure an S3 Lifecycle policy to expire any object that was created more than 30 days ago.

Discussion 0

Questions 29

A global gaming company is preparing to launch a new game on AWS. The game runs in multiple AWS Regions on a fleet of Amazon EC2 instances. The instances are in an Auto Scaling group behind an Application Load Balancer (ALB) in each Region. The company plans to use Amazon Route 53 for DNS services. The DNS configuration must direct users to the Region that is closest to them and must provide automated failover.

Which combination of steps should a CloudOps engineer take to configure Route 53 to meet these requirements? (Select TWO.)

Options:

Create Amazon CloudWatch alarms that monitor the health of the ALB in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms.

Create Amazon CloudWatch alarms that monitor the health of the EC2 instances in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms.

Configure Route 53 DNS failover by using a health check that monitors the private IP address of an EC2 instance in each Region.

Configure Route 53 geoproximity routing. Specify the Regions that are used for the infrastructure.

Configure Route 53 simple routing. Specify the continent, country, and state or province that are used for the infrastructure.

Discussion 0

Questions 30

An application runs on Amazon EC2 instances that are in an Auto Scaling group. A CloudOps engineer needs to implement a solution that provides a central storage location for errors that the application logs to disk. The solution must also provide an alert when the application logs an error.

What should the CloudOps engineer do to meet these requirements?

Options:

Deploy and configure the Amazon CloudWatch agent on the EC2 instances to log to a CloudWatch log group. Create a metric filter on the target CloudWatch log group. Create a CloudWatch alarm that publishes to an Amazon Simple Notification Service (Amazon SNS) topic that has an email subscription.

Create a cron job on the EC2 instances to identify errors and push the errors to an Amazon CloudWatch metric filter. Configure the filter to publish to an Amazon Simple Notification Service (Amazon SNS) topic that has an SMS subscription.

Deploy an AWS Lambda function that pushes the errors directly to Amazon CloudWatch Logs. Configure the Lambda function to run every time the log file is updated on disk.

Create an Auto Scaling lifecycle hook that invokes an EC2-based script to identify errors. Configure the script to push the error messages to an Amazon CloudWatch log group when the EC2 instances scale in. Create a CloudWatch alarm that publishes to an Amazon Simple Notification Service (Amazon SNS) topic that has an email subscription when the number of error messages exceeds a threshold.

Discussion 0

Questions 31

An application uses an Amazon Aurora MySQL DB cluster that includes one Aurora Replica. The application’s read performance degrades when there are more than 200 user connections. The number of user connections is approximately 180 on a consistent basis. Occasionally, the number of user connections increases rapidly to more than 200.

A CloudOps engineer must implement a solution that will scale the application automatically as user demand increases or decreases.

Which solution will meet these requirements?

Options:

Modify the DB cluster by increasing the Aurora Replica instance size.

Modify the DB cluster by changing to serverless mode whenever the number of user connections exceeds 200.

Migrate to a new Aurora DB cluster that has multiple writer instances. Modify the application’s database connection string.

Create an auto scaling policy that has a target value of 195 for the DatabaseConnections metric.

Discussion 0

Questions 32

A company has deployed Amazon EC2 instances from custom AMIs in two AWS Regions. All instances are registered with AWS Systems Manager. The company discovers a critical zero-day OS exploit but does not know which instances are affected.

A CloudOps engineer must deploy operating system patches with the LEAST operational overhead.

Which solution will meet this requirement?

Options:

Define a patch baseline in Systems Manager Patch Manager. Run a scan to identify affected instances and use Patch Now in each Region.

Use AWS Config to identify affected instances and then patch them.

Use EventBridge to trigger patching automatically.

Update the AMIs and manually replace instances.

Discussion 0

Questions 33

A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company’s new security policy requires all AWS resources to be encrypted at rest and in transit.

What should a CloudOps engineer do to encrypt the database?

Options:

Configure encryption on the existing DB instance.

Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.

Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.

Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy.

Discussion 0

Questions 34

A global company runs a critical primary workload in the us-east-1 Region. The company wants to ensure business continuity with minimal downtime in case of a workload failure. The company wants to replicate the workload to a second AWS Region.

A CloudOps engineer needs a solution that achieves a recovery time objective (RTO) of less than 10 minutes and a zero recovery point objective (RPO) to meet service level agreements.

Which solution will meet these requirements?

Options:

Implement a pilot light architecture that provides real-time data replication in the second Region. Configure Amazon Route 53 health checks and automated DNS failover.

Implement a warm standby architecture that provides regular data replication in a second Region. Configure Amazon Route 53 health checks and automated DNS failover.

Implement an active-active architecture that provides real-time data replication across two Regions. Use Amazon Route 53 health checks and a weighted routing policy.

Implement a custom script to generate a regular backup of the data and store it in an S3 bucket that is in a second Region. Use the backup to launch the application in the second Region in the event of a workload failure.

Discussion 0

Questions 35

A company has a microservice that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). A CloudOps engineer must use Amazon Route 53 to create a record that maps the ALB URL to example.com.

Which type of Route 53 record will meet this requirement?

Options:

An A record

An AAAA record

An alias record

A CNAME record

Discussion 0

Questions 36

A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created.

What should a CloudOps engineer do to meet this requirement?

Options:

Configure an IAM policy that denies the s3:DeleteObject action for all users. Remove the policy after three months.

Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.

Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Discussion 0

Questions 37

A company has an AWS Lambda function in Account A. The Lambda function needs to read the objects in an Amazon S3 bucket in Account B. A CloudOps engineer must create corresponding IAM roles in both accounts.

Which solution will meet these requirements?

Options:

In Account A, create a Lambda execution role to assume the role in Account B. In Account B, create a role that the function can assume to gain access to the S3 bucket.

In Account A, create a Lambda execution role that provides access to the S3 bucket. In Account B, create a role that the function can assume.

In Account A, create a role that the function can assume. In Account B, create a Lambda execution role that provides access to the S3 bucket.

In Account A, create a role that the function can assume to gain access to the S3 bucket. In Account B, create a Lambda execution role to assume the role in Account A.

Discussion 0

Questions 38

A company runs an application on an Amazon EC2 instance. The application uses a MySQL database. The EC2 instance has a General Purpose SSD (gp3) Amazon EBS volume attached. The company wants to perform load testing using a new MySQL database created from an EBS snapshot of the production instance. The new database must perform as similarly as possible to production.

Which solution will meet these requirements in the LEAST amount of time?

Options:

Use Amazon EBS fast snapshot restore (FSR) to create a new General Purpose SSD volume from the production snapshot.

Use Amazon EBS fast snapshot restore (FSR) to create a new Provisioned IOPS SSD volume from the production snapshot.

Use Amazon EBS standard snapshot restore to create a new General Purpose SSD volume from the production snapshot.

Use Amazon EBS standard snapshot restore to create a new Provisioned IOPS SSD volume from the production snapshot.

Discussion 0

Questions 39

A CloudOps engineer launches two Amazon EC2 instances and creates a single public subnet for testing purposes in the same Availability Zone. The CloudOps engineer wants Amazon Route 53 to respond with a public IP address only if a test webpage on an instance is running. However, even when the test webpage is unavailable, Route 53 still responds with the public IP addresses from both instances.

How can the CloudOps engineer resolve this issue?

Options:

Create a Route 53 multivalue answer routing record. Associate a health check with the record.

Configure latency-based routing with a health check in Route 53.

Configure weighted routing in Route 53.

Create another public subnet in the same Availability Zone for one of the instances.

Discussion 0

Questions 40

A company uses memory-optimized Amazon EC2 instances behind a Network Load Balancer (NLB) to run an application. The company launched the EC2 instances from an AWS-provided Red Hat Enterprise Linux (RHEL) AMI.

A CloudOps engineer must monitor RAM utilization in 5-minute intervals. The CloudOps engineer must ensure that the EC2 instances scale in and out appropriately based on incoming load.

Which solution will meet these requirements?

Options:

Configure detailed monitoring for the EC2 instances. Configure the Amazon CloudWatch agent on the EC2 instances. Create an EC2 Auto Scaling group and Auto Scaling policy that is based on the mem_active metric.

Configure detailed monitoring for the EC2 instances. Use the mem_used_percent metric that the detailed monitoring feature provides. Create an IAM role that allows the CloudWatch agent to upload data. Create an EC2 Auto Scaling group and Auto Scaling policy that is based on the mem_used_percent metric.

Configure basic monitoring for the EC2 instances. Configure the Amazon CloudWatch agent on the EC2 instances. Create an IAM role that allows the CloudWatch agent to upload data. Create an EC2 Auto Scaling group and Auto Scaling policy that is based on the mem_used_percent metric.

Configure basic monitoring for the EC2 instances. Use the standard mem_used_percent metric for monitoring. Create an EC2 Auto Scaling group and Auto Scaling policy that is based on the mem_used_percent metric.

Discussion 0

Questions 41

A company’s Amazon EC2 instance with high CPU utilization is a t3.large instance running a test web app. The company determines the app would run better on a compute-optimized large instance.

What should the CloudOps engineer do?

Options:

Migrate the EC2 instance to a compute optimized instance by using AWS VM Import/Export.

Enable hibernation on the EC2 instance. Change the instance type to a compute optimized instance. Disable hibernation on the EC2 instance.

Stop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.

Change the instance type to a compute optimized instance while the EC2 instance is running.

Discussion 0

Questions 42

A company hosts a static website on an Amazon S3 bucket behind an Amazon CloudFront distribution. When the company deploys a new version of the website, users sometimes do not see the new content until the next day.

A CloudOps engineer must implement a solution to display updates to the website as quickly as possible.

Which solution will meet this requirement?

Options:

Configure the CloudFront distribution to add a custom Cache-Control header to requests for content from the S3 bucket.

Modify the distribution settings to specify the protocol as HTTPS only.

Attach the CachingOptimized managed cache policy to the distribution.

Create a CloudFront invalidation.

Discussion 0

Questions 43

To comply with regulations, a SysOps administrator needs to back up an Amazon EC2 Amazon Machine Image (AMI) to an Amazon S3 bucket. If the SysOps administrator restores the AMI from the bucket in the future, the AMI must use the same AMI image ID as the original AMI.

Which solution will meet this requirement?

Options:

Create a copy of the AMI. Specify the destination S3 bucket. Set the launch permissions to implicit.

Archive the snapshot that is associated with the AMI. Specify the S3 bucket as the archive destination.

Create a store image task. Specify the image ID and the destination S3 bucket.

Use the AWS CLI copy-image command. Specify the image ID and the destination S3 bucket.

Discussion 0

Questions 44

A company has an application that runs on Amazon EC2 instances. The application stores data on an Amazon RDS for MySQL Single-AZ DB instance. Requests to the DB instance from the application include reads and writes.

A CloudOps engineer must implement a solution that provides failover for the DB instance. The solution must minimize application downtime.

Which solution will meet these requirements?

Options:

Modify the DB instance to be a Multi-AZ DB instance deployment.

Add a read replica in the same Availability Zone where the DB instance is deployed.

Add the DB instance to an Auto Scaling group that has a minimum capacity of 2 and a desired capacity of 2.

Use RDS Proxy to configure a proxy in front of the DB instance.

Discussion 0

Questions 45

A company uses Amazon ElastiCache (Redis OSS) to cache application data. A CloudOps engineer must implement a solution to increase the resilience of the cache and minimize the recovery time objective (RTO).

Which solution will meet these requirements?

Options:

Replace ElastiCache (Redis OSS) with ElastiCache (Memcached).

Create an Amazon EventBridge rule to initiate a backup every hour.

Create a read replica in a second Availability Zone and enable Multi-AZ for the Redis replication group.

Enable automatic backups and restore the backups when necessary.

Discussion 0

Questions 46

A company runs applications that generate log files. The company stores the log files in Amazon S3. A CloudOps engineer must automatically process the log files whenever new files upload to the S3 bucket.

Which solution will meet this requirement?

Options:

Configure an Amazon CloudWatch event rule that triggers on S3 PUT events and invokes an AWS Lambda function.

Create a pipeline in AWS CodePipeline with a source stage that monitors the S3 bucket for new files and invokes an AWS Lambda function.

Configure an S3 event notification to invoke an AWS Lambda function to process the new log files.

Create an AWS Step Functions state machine with a wait state that monitors the S3 bucket for new files and invokes an AWS Lambda function.

Discussion 0

Questions 47

A company has an application that processes events sequentially by using an Amazon SQS FIFO queue. The company needs a solution that automatically sends notifications to the SQS queue when new objects are uploaded to an Amazon S3 bucket. The solution must maintain message ordering.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

Create an AWS Lambda function that polls the objects by using the ListObjectsV2 command and detects new objects when the objects are added. Configure the Lambda function to add a message to the SQS queue when new objects are detected.

Create an event notification on the S3 bucket. Use the FIFO delivery option. Route the notifications to the existing SQS queue.

Create an Amazon SNS FIFO topic. Create an event notification on the S3 bucket. Configure the event to send messages to the SNS topic. Subscribe the existing SQS queue to the SNS topic.

Create an access point in Amazon S3 Access Points. Configure the access point to send new items to the existing SQS queue.

Discussion 0

Questions 48

A web application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). During rolling updates, application initialization and cold starts cause 30-second latency spikes. A CloudOps engineer needs to keep latency flat by pre-initializing capacity. The CloudOps engineer must reuse instances across waves without extending the maintenance window.

Which solution will meet these requirements?

Options:

Configure an Auto Scaling group warm pool with stopped instances that are pre-initialized through user data. Enable instance reuse. Set a target tracking policy with an instance warmup value. Run instance refresh in batches so the replacements pull from the warm pool.

Double the health-check grace period. Disable connection draining. Use step scaling to absorb spikes during each wave. Move to more and smaller instances.

Place a Network Load Balancer in front of the ALB to absorb burst connections. Keep the Auto Scaling group maximum unchanged. Configure zero-surge rolling replacements. Disable instance reuse.

Enable predictive scaling with a 7-day forecast on the Auto Scaling group. Overlay a CPU target-tracking policy with a 300-second instance warmup. Add scheduled actions for the rollout window. Maintain zero-surge instance refresh with standard ALB health checks.

Discussion 0

Questions 49

An ecommerce company uses Amazon ElastiCache (Redis OSS) for caching product queries. The CloudOps engineer observes a large number of cache evictions in Amazon CloudWatch metrics and needs to reduce evictions while retaining popular data in cache.

Which solution meets these requirements with the least operational overhead?

Options:

Add another node to the ElastiCache cluster.

Increase the ElastiCache TTL value.

Decrease the ElastiCache TTL value.

Migrate to a new ElastiCache cluster with larger nodes.

Discussion 0

Questions 50

A company needs to monitor its website ' s availability to end users. The company needs a solution to provide an Amazon Simple Notification Service (Amazon SNS) notification if the website ' s uptime decreases to less than 99%. The monitoring must provide an accurate view of the user experience on the website.

Which solution will meet these requirements?

Options:

Create an Amazon CloudWatch alarm that is based on the website’s logs that are published to a CloudWatch Logs log group. Configure the alarm to publish an SNS notification if the number of HTTP 4xx and 5xx errors exceeds a specified threshold.

Create an Amazon CloudWatch alarm that is based on the website ' s published metrics in CloudWatch. Configure the alarm to publish an SNS notification based on anomaly detection.

Create an Amazon CloudWatch Synthetics heartbeat monitoring canary. Associate the canary with the website’s URL. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.

Create an Amazon CloudWatch Synthetics broken link checker monitoring canary. Associate the canary with the website’s URL. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.

Discussion 0

Questions 51

A company’s ecommerce application is running on Amazon EC2 instances that are behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. Customers report that the website is occasionally down. When the website is down, it returns an HTTP 500 (server error) status code to customer browsers.

The Auto Scaling group’s health check is configured for EC2 status checks, and the instances appear healthy.

Which solution will resolve the problem?

Options:

Replace the ALB with a Network Load Balancer.

Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group.

Update the target group configuration on the ALB. Enable session affinity (sticky sessions).

Install the Amazon CloudWatch agent on all instances. Configure the agent to reboot the instances.

Discussion 0

Questions 52

An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 instances with a baseline configuration file to capture log files. There is a new requirement to capture DHCP log files that exist on 50 of the instances.

What is the MOST operationally efficient way to meet this new requirement?

Options:

Create an additional CloudWatch agent configuration file to capture the DHCP logs. Use AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option.

Run the CloudWatch agent configuration wizard on each EC2 instance and add DHCP logs manually.

Run the CloudWatch agent configuration wizard on each EC2 instance and select the advanced detail level.

Discussion 0

Questions 53

A company has a production application that runs on large compute optimized Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. The Auto Scaling group has a desired capacity of 2, a maximum capacity of 2, and a minimum capacity of 1.

The application is CPU-bound. The EC2 instances show consistent CPU utilization of 90% or greater during peak usage periods. These peak usage periods are unpredictable and cause performance issues and latency issues.

Which solution will automate the resolution of these issues?

Options:

Deploy additional instances outside the Auto Scaling group. Create a new target group that includes the existing instances and the additional instances as targets. Reconfigure the ALB to direct traffic to the new target group.

Increase the maximum capacity of the Auto Scaling group. Change the instances to a burstable instance type.

Increase the maximum capacity of the Auto Scaling group. Configure a scaling policy to add instances when instance CPU utilization is greater than 80%.

Increase the desired capacity of the Auto Scaling group. Configure a scaling policy to add instances when instance CPU utilization is greater than 80%.

Discussion 0

Questions 54

A company runs a high performance computing (HPC) data-processing application on Amazon EC2 instances in one Availability Zone within a development environment. The application uses a dataset that the company stores on an Amazon S3 general purpose bucket in the same AWS Region as the EC2 instances.

A SysOps administrator must improve the application ' s performance for retrieval of objects from Amazon S3.

Which solution will meet these requirements?

Options:

Enable S3 Transfer Acceleration for the S3 bucket. Create an S3 access point for the bucket. Update the application to use the access point.

Create an S3 Lifecycle configuration for the S3 bucket to move all objects to the S3 Express One Zone storage class. Update the application to use an S3 Regional endpoint.

Create a second general purpose S3 bucket in the same Region. Copy the objects from the original bucket to the new bucket. Use the S3 Express One Zone storage class to store the objects in the new bucket. Update the application to use an S3 Regional endpoint.

Create an S3 directory bucket in the same Availability Zone. Import objects from the original bucket to the new bucket. Use the S3 Express One Zone storage class to store the objects in the new bucket. Update the application to use an S3 Zonal endpoint.

Discussion 0

Questions 55

A company deploys AWS infrastructure in a VPC that has an internet gateway. The VPC has public subnets and private subnets. An Amazon RDS for MySQL DB instance is deployed in a private subnet. An AWS Lambda function uses the same private subnet and connects to the DB instance to query data.

A developer modifies the Lambda function to require the function to publish messages to an Amazon Simple Queue Service (Amazon SQS) queue. After these changes, the Lambda function times out when it tries to publish messages to the SQS queue.

Which solutions will resolve this issue? (Select TWO.)

Options:

Reconfigure the Lambda function so that the function is not connected to the VPC.

Deploy an RDS proxy. Configure the Lambda function to connect to the DB instance through the proxy.

Deploy a NAT gateway. Update the private subnet ' s route table to route all traffic to the NAT gateway.

Create an interface VPC endpoint for Amazon SQS in the VPC.

Create a gateway endpoint for Amazon SQS in the VPC.

Discussion 0

Questions 56

A company uses AWS CloudFormation stacks to manage its infrastructure. The company’s developers commit infrastructure changes to the company’s Git repository. The company wants to automate updates to the CloudFormation stacks when developers commit changes. The company requires change set generation before deployment and notification of pending changes for approval. The solution must also minimize infrastructure maintenance overhead.

Which solution will meet these requirements?

Options:

Create a pipeline in AWS CodePipeline with GitHub as the source provider. Configure a CloudFormation deploy action to create change sets. Use Amazon SNS to send approval notifications.

Use CloudFormation Git sync to automatically deploy changes when developers push commits to the repository. Configure Amazon EventBridge to trigger an Amazon SNS notification after each deployment is complete.

Create an AWS Lambda function that creates the CloudFormation change sets, runs the change sets, and waits for approval. Set up an Amazon EventBridge rule to invoke the Lambda function when developers commit code to the Git repository.

Use AWS Systems Manager Automation to scan the Git repository for changes. Create a change set and deploy the CloudFormation stack.

Discussion 0

Questions 57

A company is using AWS Certificate Manager (ACM) to manage public SSL/TLS certificates. A CloudOps engineer needs to send an email notification when a certificate has less than 14 days until expiration.

Which solution will meet this requirement with the LEAST operational overhead?

Options:

Create an Amazon CloudWatch custom metric to monitor certificate expiration for all ACM certificates. Create an Amazon EventBridge rule that has an event source of aws.cloudwatch. Configure the rule to send an event to a target Amazon SNS topic if the DaysToExpiry metric is less than 14. Subscribe the appropriate email addresses to the SNS topic.

Create an Amazon EventBridge rule that has an event source of aws.acm. Configure the rule to evaluate the DaysToExpiry metric for all ACM certificates. Configure the rule to send an event to a target Amazon SNS topic if DaysToExpiry is less than 14. Subscribe the appropriate email addresses to the SNS topic.

Create an Amazon CloudWatch dashboard that displays the DaysToExpiry metric for all ACM certificates. If DaysToExpiry is less than 14, send an email message to the appropriate email addresses. Send the email message by running a predefined CLI command to publish to an Amazon SNS topic.

Create an Amazon EventBridge rule that has an event source of aws.acm. Configure the rule to evaluate the DaysToExpiry metric for all ACM certificates. Configure a target SMS identity that uses a predefined email template. Configure the rule to send an event to the target SMS identity if DaysToExpiry is less than 14.

Discussion 0

Questions 58

A CloudOps engineer is creating two AWS CloudFormation templates. The first template will create a VPC with associated resources, such as subnets, route tables, and an internet gateway. The second template will deploy application resources within the VPC that was created by the first template. The second template should refer to the resources created by the first template.

How can this be accomplished with the LEAST amount of administrative effort?

Options:

Add an export field to the outputs of the first template and import the values in the second template.

Create a custom resource that queries the stack created by the first template and retrieves the required values.

Create a mapping in the first template that is referenced by the second template.

Input the names of resources in the first template and refer to those names in the second template as a parameter.

Discussion 0

Questions 59

A company runs a three-tier web application on AWS. The application includes web servers, application servers, and database servers. The application servers process requests from the web servers. The company wants to ensure high availability of the application. Therefore, the company needs to monitor the health of the application servers and route traffic only to healthy instances.

Which solution will meet these requirements?

Options:

Create an Application Load Balancer (ALB) in front of the application servers with health checks for the application servers.

Create an Amazon Route 53 health check for the application servers. Attach a Network Load Balancer (NLB) in front of the application servers.

Create an AWS Lambda function that restarts an application server. Configure an Amazon CloudWatch alarm to monitor the health of the application servers. Run the function when an application is unhealthy.

Create an Amazon CloudWatch metric to monitor the health of the application servers. Route traffic by using a Network Load Balancer (NLB).

Discussion 0

Questions 60

A company runs a website on Amazon EC2 instances. Users can upload images to an Amazon S3 bucket and publish the images to the website. The company wants to deploy a serverless image-processing application that uses an AWS Lambda function to resize the uploaded images.

The company ' s development team has created the Lambda function. A CloudOps engineer must implement a solution to invoke the Lambda function when users upload new images to the S3 bucket.

Which solution will meet this requirement?

Options:

Configure an Amazon Simple Notification Service (Amazon SNS) topic to invoke the Lambda function when a user uploads a new image to the S3 bucket.

Configure an Amazon CloudWatch alarm to invoke the Lambda function when a user uploads a new image to the S3 bucket.

Configure S3 Event Notifications to invoke the Lambda function when a user uploads a new image to the S3 bucket.

Configure an Amazon Simple Queue Service (Amazon SQS) queue to invoke the Lambda function when a user uploads a new image to the S3 bucket.

Discussion 0

Questions 61

A CloudOps engineer has successfully deployed a VPC with an AWS CloudFormation template. The CloudOps engineer wants to deploy the same template across multiple accounts that are managed through AWS Organizations.

Which solution will meet this requirement with the LEAST operational overhead?

Options:

Assume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.

Create an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.

Create an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.

Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.

Discussion 0

Questions 62

A company hosts an encrypted Amazon S3 bucket in the ap-southeast-2 Region. Users from the eu-west-2 Region access the S3 bucket through the internet. The users from eu-west-2 need faster transfers to and from the S3 bucket for large files.

Which solution will meet these requirements?

Options:

Create an S3 access point in eu-west-2 to use as the destination for S3 replication from ap-southeast-2. Ensure all users switch to the new S3 access point.

Create an Amazon Route 53 hosted zone with a geolocation routing policy. Choose the Alias to S3 website endpoint option. Specify the S3 bucket that is in ap-southeast-2 as the source bucket.

Create a new S3 bucket in eu-west-2. Copy all contents from ap-southeast-2 to the new bucket in eu-west-2. Create an S3 access point, and associate it with both buckets. Ensure users use the new S3 access point.

Configure and activate S3 Transfer Acceleration on the S3 bucket. Use the new S3 acceleration endpoint ' s domain name for access.

Discussion 0

Questions 63

A finance company uses AWS Secrets Manager to store Amazon RDS credentials that are periodically rotated. A database team must receive a notification when the credentials are rotated to ensure compliance with security policies. The database team creates an Amazon Simple Notification Service (Amazon SNS) topic for the notifications.

Which solution will meet these requirements?

Options:

Create an Amazon EventBridge rule to match AWS CloudTrail events for the RotateSecret API call with a RotationSucceeded result. Configure the rule to route matching events to the SNS topic.

Enable notifications for secret rotation in AWS Secrets Manager. Configure Secrets Manager to publish notifications to the SNS topic when secrets are rotated.

Use Amazon EventBridge to filter Amazon CloudWatch Logs for RotationSucceeded events. Route notifications for all matches to the SNS topic.

Use Amazon CloudWatch Logs to filter for RotationSucceeded events. Route notifications for all matches to the SNS topic.

Discussion 0

Questions 64

A company requires the rotation of administrative credentials for production workloads on a regular basis. A CloudOps engineer must implement this policy for an Amazon RDS DB instance ' s master user password.

Which solution will meet this requirement with the LEAST operational effort?

Options:

Create an AWS Lambda function to change the RDS master user password. Create an Amazon EventBridge scheduled rule to invoke the Lambda function.

Create a new SecureString parameter in AWS Systems Manager Parameter Store. Encrypt the parameter with an AWS Key Management Service (AWS KMS) key. Configure automatic rotation.

Create a new String parameter in AWS Systems Manager Parameter Store. Configure automatic rotation.

Create a new RDS database secret in AWS Secrets Manager. Apply the secret to the RDS DB instance. Configure automatic rotation.

Discussion 0

Questions 65

A company ' s application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53.

Which Route 53 record should be created to address this requirement?

Options:

A record

Alias record

CNAME record

Pointer (PTR) record

Discussion 0

Pre-Summer Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

examsbrite logo

Navigation:

AWS Certified CloudOps Engineer - Associate SOA-C03 Exam Questions with Experts Answers Updated Recently

AWS Certified CloudOps Engineer - Associate Question and Answers

SOA-C03 PDF

SOA-C03 Testing Engine

SOA-C03 PDF + Testing Engine

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Answer:

Explanation:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Answer:

Explanation:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Answer:

Explanation:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Quick Links