AWS Certified CloudOps Engineer - Associate

Here you have the best Amazon SOA-C03 practice exam questions

You have 65 total questions across 13 pages (5 per page)
These questions were last updated on February 10, 2026
This site is not affiliated with or endorsed by Amazon.

Question 1 of 65

A CloudOps engineer is examining the following AWS CloudFormation template:
Exam AWS Certified CloudOps Engineer - Associate SOA-C03: Question 1 - Image 1

Exam AWS Certified CloudOps Engineer - Associate SOA-C03: Question 1 - Image 1

Why will the stack creation fail?

A.

The Outputs section of the CloudFormation template was omitted.

B.

The Parameters section of the CloudFormation template was omitted.

C.

The PrivateDnsName cannot be sot from a CloudFormation template.

D.

The VPC was not specified in the CloudFormation template.

Suggested Answer: C

Community votes

No votes yet

Question 2 of 65

A company applies user-defined tags to resources that are associated with the company's AWS workloads. Twenty days after applying the tags, the company notices that it cannot use the tags to filter views in the AWS Cost Explorer console.
What is the reason for this issue?

A.

It takes at least 30 days to be able to use tags to filter views in Cost Explorer.

B.

The company has not activated the user-defined tags for cost allocation.

C.

The company has not created an AWS Cost and Usage Report.

D.

The company has not created a usage budget in AWS Budgets.

Suggested Answer: B

Community votes

No votes yet

Question 3 of 65

An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 instances with a baseline configuration file to capture log files. There is a new requirement to capture the DHCP log files that exist on 50 of the instances.
What is the MOST operationally efficient way to meet this new requirement?

A.

Create an additional CloudWatch agent configuration filo to capture the DHCP logs. Use the AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option to apply the additional configuration file.

B.

Log in to each EC2 instance with administrator rights. Create a PowerShell script to push the needed baseline log files and DHCP log files to CloudWatch.

C.

Run the CloudWatch agent configuration file wizard on each EC2 instance. Verify that the baseline log files are included and add the DHCP log files during the wizard creation process.

D.

Run the CloudWatch agent configuration file wizard on each EC2 instance and select the advanced detail level. This will capture the operating system log files.

Suggested Answer: A

Community votes

No votes yet

Question 4 of 65

A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created.
What should a CloudOps engineer do to meet this requirement?

A.

Configure an IAM policy that denies the s3:DeleteObject action for all users. Three months after an object is written, remove the policy.

B.

Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

C.

Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.

D.

Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Suggested Answer: B

Community votes

No votes yet

Question 5 of 65

A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs However, there are no logs in CloudWatch Logs.
What could be blocking the VPC flow logs from being published to CloudWatch Logs?

A.

The IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.

B.

The IAM policy that is attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.

C.

The VPC is configured for IPv6 addresses.

D.

The VPC is peered with another VPC in the AWS account

Suggested Answer: A

Community votes

No votes yet

About the Amazon SOA-C03 Certification Exam

About the Exam

The Amazon SOA-C03 (AWS Certified CloudOps Engineer - Associate) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 65 practice questions across 13 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our SOA-C03 questions are regularly updated to reflect the latest exam objectives.