AWS Certified CloudOps Engineer –
Associate (SOA-C03) Practice Exam
1. Which AWS service provides automated monitoring and alerting for
operational health of resources?
A. AWS CloudTrail
B. Amazon CloudWatch
C. AWS Config
D. AWS IAM
✅ Answer: B
Rationale: CloudWatch collects metrics, monitors resources, and can trigger alarms for
operational events.
2. A DevOps team wants to automate deployment of EC2 instances in
multiple regions. Which service is best?
A. AWS CodeDeploy
B. AWS CloudFormation
C. Amazon S3
D. AWS Lambda
✅ Answer: B
Rationale: CloudFormation allows you to define infrastructure as code and deploy consistently
across regions.
3. Which AWS service logs all API calls for auditing purposes?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS Systems Manager
,✅ Answer: B
Rationale: CloudTrail records API activity and provides an audit trail for security and
compliance.
4. Which AWS feature allows automatic scaling of EC2 instances based on
demand?
A. Auto Scaling Groups
B. Elastic Load Balancing
C. AWS Lambda
D. Amazon RDS
✅ Answer: A
Rationale: Auto Scaling Groups adjust the number of instances automatically based on defined
metrics.
5. A system administrator wants to centrally manage access policies for
multiple AWS accounts. Which service should they use?
A. AWS IAM
B. AWS Organizations
C. AWS Cognito
D. Amazon GuardDuty
✅ Answer: B
Rationale: AWS Organizations allows centralized management of multiple AWS accounts,
including policies.
6. Which service provides automated configuration compliance monitoring
for AWS resources?
A. AWS Config
B. AWS CloudTrail
C. Amazon CloudFront
D. AWS Route 53
✅ Answer: A
Rationale: AWS Config continuously monitors configuration changes and checks compliance
with defined rules.
, 7. Which AWS service allows you to run code without provisioning
servers?
A. AWS Lambda
B. Amazon EC2
C. Amazon S3
D. Amazon RDS
✅ Answer: A
Rationale: Lambda executes code in response to events and automatically manages compute
resources.
8. To protect sensitive data at rest, which AWS feature should be used?
A. Server-side encryption (SSE)
B. Security Groups
C. VPC Peering
D. AWS CloudWatch
✅ Answer: A
Rationale: SSE encrypts data at rest using AWS-managed or customer-managed keys.
9. Which load balancing type supports TCP and HTTP/HTTPS traffic for
high availability?
A. Application Load Balancer
B. Network Load Balancer
C. Classic Load Balancer
D. All of the above
✅ Answer: D
Rationale: Each load balancer type can handle different protocols and traffic scenarios for HA
setups.
10. Which AWS service can store container images for use with ECS or
EKS?
Associate (SOA-C03) Practice Exam
1. Which AWS service provides automated monitoring and alerting for
operational health of resources?
A. AWS CloudTrail
B. Amazon CloudWatch
C. AWS Config
D. AWS IAM
✅ Answer: B
Rationale: CloudWatch collects metrics, monitors resources, and can trigger alarms for
operational events.
2. A DevOps team wants to automate deployment of EC2 instances in
multiple regions. Which service is best?
A. AWS CodeDeploy
B. AWS CloudFormation
C. Amazon S3
D. AWS Lambda
✅ Answer: B
Rationale: CloudFormation allows you to define infrastructure as code and deploy consistently
across regions.
3. Which AWS service logs all API calls for auditing purposes?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS Systems Manager
,✅ Answer: B
Rationale: CloudTrail records API activity and provides an audit trail for security and
compliance.
4. Which AWS feature allows automatic scaling of EC2 instances based on
demand?
A. Auto Scaling Groups
B. Elastic Load Balancing
C. AWS Lambda
D. Amazon RDS
✅ Answer: A
Rationale: Auto Scaling Groups adjust the number of instances automatically based on defined
metrics.
5. A system administrator wants to centrally manage access policies for
multiple AWS accounts. Which service should they use?
A. AWS IAM
B. AWS Organizations
C. AWS Cognito
D. Amazon GuardDuty
✅ Answer: B
Rationale: AWS Organizations allows centralized management of multiple AWS accounts,
including policies.
6. Which service provides automated configuration compliance monitoring
for AWS resources?
A. AWS Config
B. AWS CloudTrail
C. Amazon CloudFront
D. AWS Route 53
✅ Answer: A
Rationale: AWS Config continuously monitors configuration changes and checks compliance
with defined rules.
, 7. Which AWS service allows you to run code without provisioning
servers?
A. AWS Lambda
B. Amazon EC2
C. Amazon S3
D. Amazon RDS
✅ Answer: A
Rationale: Lambda executes code in response to events and automatically manages compute
resources.
8. To protect sensitive data at rest, which AWS feature should be used?
A. Server-side encryption (SSE)
B. Security Groups
C. VPC Peering
D. AWS CloudWatch
✅ Answer: A
Rationale: SSE encrypts data at rest using AWS-managed or customer-managed keys.
9. Which load balancing type supports TCP and HTTP/HTTPS traffic for
high availability?
A. Application Load Balancer
B. Network Load Balancer
C. Classic Load Balancer
D. All of the above
✅ Answer: D
Rationale: Each load balancer type can handle different protocols and traffic scenarios for HA
setups.
10. Which AWS service can store container images for use with ECS or
EKS?
