SOA-C03 AWS Certified CloudOps Engineer – Associate Free Practice Questions and Answers

A legacy application runs on EC2 instances behind an Application Load Balancer and requires session affinity. The target group uses weighted random routing, and users now report intermittent errors. Which change should the team make?

• A. Change the routing algorithm to least outstanding requests and enable sticky sessions.
• B. Enable anomaly mitigation for the target group.
• C. Disable cross-zone load balancing.
• D. Increase the deregistration delay.

An Aurora MySQL cluster has a 72-hour backtrack window. The operations team must return the production cluster to a point within that window without restoring to a separate cluster. Which feature should it use?

• A. Promote an Aurora Replica.
• B. Restore an automatic backup with Lambda.
• C. Backtrack the existing cluster to the required time.
• D. Use point-in-time recovery to overwrite the existing cluster.

A failed CloudFormation deployment removed the stack and its resources before troubleshooting could begin. How can future deployments preserve resources that were successfully created?

• A. Set DisableRollback to false.
• B. Set the stack’s OnFailure behavior to DO_NOTHING.
• C. Add a rollback trigger named DO_NOTHING.
• D. Set OnFailure to ROLLBACK.

A public website uses an Application Load Balancer and an AWS Certificate Manager certificate. The load balancer must redirect all HTTP requests to HTTPS. Which setup meets this requirement?

• A. Use one HTTPS listener on port 80 and attach the certificate there.
• B. Use an HTTP listener on port 80 and an HTTPS listener on port 443 with the certificate; configure the HTTP listener to redirect to HTTPS.
• C. Use TCP listeners on ports 80 and 443 and configure a redirect rule.
• D. Use a Network Load Balancer with TCP listeners and redirect traffic from port 80.

A company must prevent EC2 launches without a CostCenter-Project tag, but only in one application OU. Which solution applies the restriction at the right scope?

• A. Put users in an IAM group that allows launches only when the tag is present.
• B. Attach an SCP that denies ec2:RunInstances when the tag is absent to the application OU.
• C. Attach an IAM role with the required tag condition to each user.
• D. Attach the denying SCP to the organization root.