Free AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 – Amazon AWS-CERTIFIED-CLOUDOPS-ENGINEER-ASSOCIATE-SOA-C03 Practice Test Question

Select an option, then click Submit answer.

• ○ The IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.
• ○ The IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.
• ○ The VPC is configured for IPv6 addresses.
• ○ The VPC is peered with another VPC in the AWS account

Select an option, then click Submit answer.

• ○ Use a secondary tag to create 10 batches of 30 instances each. Use a Systems Manager Run Command document to download and install the package. Specify the target as part of the Run Command document by using the secondary tag. Run each batch one time.
• ○ Use an AWS Lambda function to automatically run a Systems Manager Run Command document that roads a list of instance IDs that have the user-defined tag. Set reserved concurrency for the Lambda function to 30.
• ○ Use a Systems Manager Run Command document to download and install the package. Use rate control to set concurrency to 30. Specify the target by using the user-defined tag as part of the Run Command document.
• ○ Use a parallel workflow state in AWS Step Functions to automatically run a Systems Manager Run Command document that reads a list of instance IDs that have the user-defined tag. Set the number of parallel states to 30. Run the Step Functions workflow 10 times.

Select an option, then click Submit answer.

• ○ Assume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.
• ○ Create an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.
• ○ Create an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.
• ○ Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.

Select an option, then click Submit answer.

• ○ Create a single AWS Storage Gateway file gateway.
• ○ Create an Amazon FSx for Windows File Server Multi-AZ file system.
• ○ Deploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.
• ○ Deploy two Amazon FSx for Windows File Server Single-AZ 2 file systems Configure Microsoft Distributed File System Replication (DFSR).

Select an option, then click Submit answer.

• ○ Perform a CloudWatch Logs Insights query that uses the stats command and count function.
• ○ Perform a CloudWatch Logs search that uses the groupby keyword and count function.
• ○ Perform an Amazon Athena query that uses the SELECT and GROUP BV keywords.
• ○ Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.

Select an option, then click Submit answer.

• ○ Create an Amazon CloudWatch alarm for the AWS Config rule's status metric. Create an AWS Lambda function that can remove the noncompliant rule from the security group. Configure the alarm action to invoke the Lambda function.
• ○ Configure an automatic remediation action on the AWS Config rule. Specify the AWS-DisablolncomingSSHOnPort22 remediation action.
• ○ Configure an Amazon EventBridge rule for AWS Config configuration item change events. Create an AWS Lambda function that can remove the noncompliant rule from the security group Configure the rule to invoke the Lambda function.
• ○ Create an AWS Lambda function that can analyze a security group’s inbound rules to check for unrestricted SSH access. Configure the Lambda function to remove the noncompliant rule from the security group. Configure an Amazon EventBridge rule to invoke the Lambda function every hour.

Select an option, then click Submit answer.

• ○ Create an Amazon CloudWatch alarm for the EC2 instance with basic monitoring. Add an action to restart the instance.
• ○ Create an Amazon CloudWatch alarm for the EC2 instance with detailed monitoring. Add an action to restart the instance.
• ○ Create an AWS Lambda function to restart the EC2 instance, invoked on a scheduled basis every 2 minutes.
• ○ Create an AWS Lambda function to restart the EC2 instance, invoked by EC2 health checks.

Select an option, then click Submit answer.

• ○ Configure Amazon S3 Cross-Region Replication (CRR). Use Amazon S3 live replication to replicate existing objects.
• ○ Configure Amazon S3 Cross-Region Replication (CRR). Use S3 Batch Replication to replicate existing objects.
• ○ Configure Amazon S3 Cross-Region Replication (CRR). Use S3 Replication Time Control (S3 RTC) to replicate existing objects.
• ○ Use S3 Lifecycle rules to move objects to the destination bucket in a second Region.

Select an option, then click Submit answer.

• ○ The missing instances have insufficient historical Amazon CloudWatch metric data for analysis.
• ○ Compute Optimizer does not support the instance types of the missing instances.
• ○ Compute Optimizer already considers the missing instances to be optimized.
• ○ The missing instances are running a Windows operating system.

Select an option, then click Submit answer.

• ○ The user who launched the instance does not have ec2:RunInstances permissions within the application account.
• ○ The company encrypted the AMI by using an AWS KMS key that the user who launched the EC2 instance does not have access to.
• ○ There is a service control policy (SCP) that denies the user who launched the EC2 instance access to launch instances in the application account.
• ○ The user launched the EC2 instance into a subnet that does not have access to the internet.

Select an option, then click Submit answer.

• ○ Associate a secondary IPv4 CIDR block with the VPC.
• ○ Associate a primary IPv6 CIDR block with the VPC.
• ○ Create a new subnet for the VPC.
• ○ Modify the CIDR block of the VPC.
• ○ Modify the CIDR block of the subnet that is associated with the instances.

Select an option, then click Submit answer.

• ○ Configure the monitoring tools to publish findings to Amazon EventBridge. Create an EventBridge rule that invokes the runbook in response to events from the monitoring tools.
• ○ Configure the monitoring tools to send findings to an Amazon SNS topic. Subscribe the runbook to the SNS topic. Invoke the runbook when a message is received.
• ○ Configure the monitoring tools to write findings to Amazon CloudWatch Logs. Create a CloudWatch Logs subscription filter that invokes the runbook when new log entries are detected.
• ○ Configure AWS Config to assess the resources and publish configuration changes to Amazon EventBridge. Create a rule to invoke the runbook in response to configuration change events.

Select an option, then click Submit answer.

• ○ Configure an Amazon CloudWatch alarm that invokes an AWS Systems Manager Automation runbook to vertically scale the EC2 instance when the CPU utilization exceeds 80%.
• ○ Configure an AWS Systems Manager Automation runbook to run a script that automatically restarts the application when CPU utilization exceeds 80%.
• ○ Configure an Amazon EventBridge rule that invokes an AWS Systems Manager Automation document. Configure the document to increase the EC2 instance size when CPU utilization exceeds 80%.
• ○ Set up an Auto Scaling group with an Amazon CloudWatch alarm that triggers a scaling policy to launch additional EC2 instances when the CPU utilization exceeds 80%.