CLOUDPUZ
AWS Certified
CloudOps Engineer -
Associate
SOA-C03
150 Practice Questions
Answers & Detailed Explanations
2 practice tests • 75 questions per test • English
Independent study material for certification preparation. This publication is not affiliated with or endorsed by Amazon Web
Services. AWS and related names are trademarks of their respective owners.
Practice questions for learning and revision; no claim is made that these are live certification exam questions.
CLOUDPUZ | SOA-C03 | Practice questions & answers 1
, How to use this question bank
Complete each practice test before consulting its answer key. Select one answer unless the
question specifies multiple answers. Review the explanations for every option, then revisit the
topics you missed.
Each test has three sections: Questions, Quick answer key, and Answers with explanations.
Question numbering restarts at 1 for Test 2.
The questions and explanations retain the content of the Cloudpuz source question banks. Official reference links supplied
in those banks are preserved for further study. Service capabilities and exam objectives may evolve.
CLOUDPUZ | SOA-C03 | Practice questions & answers 2
, Practice Test 1
Questions 1-75
Question 1 | Security and Compliance
An operator finds exposed credentials in an application log. What immediate action is needed?
A. Wait for the next annual audit
B. Revoke or rotate the credentials and contain log access
C. Only hide the log line in a dashboard
D. Base64-encode the existing log
Select 1 answer.
Question 2 | Security and Compliance
A security team asks for a history of supported resource configurations. Which service should be
enabled?
A. Amazon SQS
B. Amazon CloudFront
C. AWS Config
D. Amazon EFS
Select 1 answer.
Question 3 | Deployment and Automation
An operator wants a desired configuration checked and reapplied on managed nodes. Which
feature fits?
A. A Route 53 MX record
B. Systems Manager State Manager
C. A manual one-time shell command with no tracking
D. An S3 archive transition
Select 1 answer.
CLOUDPUZ | SOA-C03 | Practice questions & answers 3
, Question 4 | Reliability and Business Continuity
An operator wants to reduce cascading failure when one external dependency is unavailable.
Which application behavior helps?
A. Timeouts, bounded retries, and circuit breaking
B. One unbounded shared worker pool for everything
C. Infinite retries with no delay
D. No timeouts on any request
Select 1 answer.
Question 5 | Networking and Content Delivery
A Transit Gateway attachment exists but traffic is not reaching another attachment. What should
be checked?
A. Only the attachment's name
B. Only the instance's storage size
C. Only an ALB listener certificate
D. VPC routes and Transit Gateway route-table associations and propagation
Select 1 answer.
Question 6 | Reliability and Business Continuity
A cross-Region replica uses asynchronous replication. What should the recovery runbook account
for?
A. No need to test the recovery endpoint
B. Automatic preservation of every open client connection
C. Possible replication lag and data reconciliation needs
D. Guaranteed zero loss under every failure
Select 1 answer.
Question 7 | Security and Compliance
A team wants to aggregate supported security findings across accounts. Which service fits?
A. Amazon Polly
B. Amazon EBS
C. AWS Security Hub
D. S3 Transfer Acceleration
Select 1 answer.
CLOUDPUZ | SOA-C03 | Practice questions & answers 4
AWS Certified
CloudOps Engineer -
Associate
SOA-C03
150 Practice Questions
Answers & Detailed Explanations
2 practice tests • 75 questions per test • English
Independent study material for certification preparation. This publication is not affiliated with or endorsed by Amazon Web
Services. AWS and related names are trademarks of their respective owners.
Practice questions for learning and revision; no claim is made that these are live certification exam questions.
CLOUDPUZ | SOA-C03 | Practice questions & answers 1
, How to use this question bank
Complete each practice test before consulting its answer key. Select one answer unless the
question specifies multiple answers. Review the explanations for every option, then revisit the
topics you missed.
Each test has three sections: Questions, Quick answer key, and Answers with explanations.
Question numbering restarts at 1 for Test 2.
The questions and explanations retain the content of the Cloudpuz source question banks. Official reference links supplied
in those banks are preserved for further study. Service capabilities and exam objectives may evolve.
CLOUDPUZ | SOA-C03 | Practice questions & answers 2
, Practice Test 1
Questions 1-75
Question 1 | Security and Compliance
An operator finds exposed credentials in an application log. What immediate action is needed?
A. Wait for the next annual audit
B. Revoke or rotate the credentials and contain log access
C. Only hide the log line in a dashboard
D. Base64-encode the existing log
Select 1 answer.
Question 2 | Security and Compliance
A security team asks for a history of supported resource configurations. Which service should be
enabled?
A. Amazon SQS
B. Amazon CloudFront
C. AWS Config
D. Amazon EFS
Select 1 answer.
Question 3 | Deployment and Automation
An operator wants a desired configuration checked and reapplied on managed nodes. Which
feature fits?
A. A Route 53 MX record
B. Systems Manager State Manager
C. A manual one-time shell command with no tracking
D. An S3 archive transition
Select 1 answer.
CLOUDPUZ | SOA-C03 | Practice questions & answers 3
, Question 4 | Reliability and Business Continuity
An operator wants to reduce cascading failure when one external dependency is unavailable.
Which application behavior helps?
A. Timeouts, bounded retries, and circuit breaking
B. One unbounded shared worker pool for everything
C. Infinite retries with no delay
D. No timeouts on any request
Select 1 answer.
Question 5 | Networking and Content Delivery
A Transit Gateway attachment exists but traffic is not reaching another attachment. What should
be checked?
A. Only the attachment's name
B. Only the instance's storage size
C. Only an ALB listener certificate
D. VPC routes and Transit Gateway route-table associations and propagation
Select 1 answer.
Question 6 | Reliability and Business Continuity
A cross-Region replica uses asynchronous replication. What should the recovery runbook account
for?
A. No need to test the recovery endpoint
B. Automatic preservation of every open client connection
C. Possible replication lag and data reconciliation needs
D. Guaranteed zero loss under every failure
Select 1 answer.
Question 7 | Security and Compliance
A team wants to aggregate supported security findings across accounts. Which service fits?
A. Amazon Polly
B. Amazon EBS
C. AWS Security Hub
D. S3 Transfer Acceleration
Select 1 answer.
CLOUDPUZ | SOA-C03 | Practice questions & answers 4
