Path & PassCertification practice
SOA-C03

AWS Certified CloudOps Engineer - Associate (SOA-C03)

Study another certification
Progress0%
Recent accuracy0%
Review due0questions
Answered0 / 172questions

Practice by topic

1 Monitoring, logging, analysis, remediation, and performance optimizationMetrics, alarms, log analysis, incident remediation, and performance improvement.38questionsMedium
2 Reliability and business continuityBackups, recovery, failover, and scaling.36questionsMedium
3 Deployment, provisioning, and automationCloudFormation, Systems Manager, CI/CD, and operational automation.35questionsMedium
4 Security and complianceIAM, vulnerabilities, detection, encryption, and compliance assessment.25questionsMedium
5 Networking and content deliveryVPC, connectivity, DNS, load balancing, and CloudFront.38questionsMedium
5 areas / 14 objectives selected172questionseligible

Learning modes

Mock examPractice with exam-style timing and length

Browse questions by objective

Choose a topic to read an individual question, its hints, and explanations. No session setup is required.

1.1 Implement monitoring, logging, and remediation17 questions
  1. Notify operators when EC2 CPU remains high
  2. Extract and aggregate errors from many log groups
  3. Audit S3 object-level operations
  4. Collect memory and disk utilization from EC2
  5. Alarm on an application queue length
  6. Combine alarms into one incident notification
  7. Turn authentication failures in logs into an alarm
  8. Find the DynamoDB keys that contribute most to traffic
  9. Collect operational metrics for ECS tasks and clusters
  10. Detect Lambda concurrency approaching its limit
  11. Distinguish ALB-generated errors from target errors
  12. Detect unusual load with daily and weekly patterns
  13. Review multiple services in a shared operational view
  14. Continuously deliver new logs to an analysis stream
  15. Apply EC2 file-log collection settings
  16. Investigate OpenSearch shard search latency and resources
  17. Monitor metrics from multiple accounts in one dashboard
1.2 Identify and remediate issues by using monitoring and availability metrics6 questions
  1. Automate a response to an EC2 stop event
  2. Run one diagnostic command on tagged EC2 instances
  3. Trace latency from an API through a database
  4. Reduce SQS redelivery caused by visibility expiry
  5. Notify and recover an EC2 system status check failure
  6. Enrich an event before sending it to a target
1.3 Remediate issues and optimize performance15 questions
  1. Identify the SQL causing high RDS database load
  2. Investigate declining performance of a burstable EC2 instance
  3. Detect messages waiting too long in SQS
  4. Compare pending EBS I/O with completed operations
  5. Warn on RDS free storage with the correct unit
  6. Interpret Lambda p95 execution duration
  7. Identify the DynamoDB resource and throttling limit
  8. Investigate memory-related ECS container stops
  9. Place nodes for low-latency node-to-node traffic
  10. Evaluate EC2 right-sizing candidates from utilization
  11. Absorb bursts of short-lived database connections with RDS Proxy
  12. Clean up incomplete S3 multipart uploads
  13. Accelerate S3 transfers from distant clients
  14. Tune EBS throughput from measured limits
  15. Handle unpredictable EFS throughput spikes
3.2 Automate the management of existing resources11 questions
  1. Stop unused EC2 instances overnight
  2. Deploy an EC2 application with a rollback path
  3. Deploy automatically after a source change
  4. Roll back a failed deployment automatically
  5. Pass the same build artifact to later stages
  6. Run scripts before and after an EC2 deployment
  7. Require approval before production deployment
  8. Move a new ECS version to users gradually
  9. Shorten build time by reusing dependencies
  10. Share private packages across build projects
  11. Start Systems Manager Automation from an S3 event
2.3 Implement backup and restore strategies10 questions
  1. Manage backups for several AWS services centrally
  2. Prepare AWS Backup copies in another Region
  3. Prepare to restore S3 overwrites and simple deletes
  4. Prepare DynamoDB point-in-time recovery before incorrect updates
  5. Prepare FSx daily backup retention and restoration
  6. Automate backups across several AWS services
  7. Choose a near-current restore for an RDS database
  8. Recover an overwritten S3 object
  9. Choose a disaster recovery design with a short RTO
  10. Choose a disaster recovery strategy from RPO, RTO, and cost
2.2 Implement highly available and resilient environments13 questions
  1. Fail over an RDS database after an Availability Zone failure
  2. Use ALB target health to decide DNS failover
  3. Prepare shared Linux file access through an Availability Zone failure
  4. Protect backups from deletion by administrators
  5. Regularly verify restore capability and RTO
  6. Restore RDS to a recent point in time
  7. Fail over to a backup origin after an error
  8. Schedule EBS snapshots with tag-based retention
  9. Automatically recover an EC2 host failure
  10. Connect tasks in multiple AZs to the same EFS file system
  11. Reprocess messages moved to a dead-letter queue
  12. Validate application recovery after Aurora failover
  13. Monitor S3 replication delay
2.1 Implement scalability and elasticity13 questions
  1. Scale EC2 capacity toward a CPU target
  2. Manage Aurora reader count and distribution of new connections
  3. Initialize an EC2 instance before adding it to service
  4. Reserve concurrency for a critical Lambda function
  5. Maintain four running tasks in an ECS service
  6. Keep DynamoDB available in multiple Regions
  7. Stop sending traffic to unhealthy targets
  8. Apply a new AMI to all instances gradually
  9. Scale Lambda from SQS without overloading a database
  10. Automatically expand RDS storage
  11. Adjust provisioned DynamoDB capacity automatically
  12. Reduce empty SQS receive responses
  13. Reduce database load with a cache during a read spike
3.1 Provision and maintain resources19 questions
  1. Create the same resource stack in every environment
  2. Review the impact of a production stack update
  3. Define infrastructure with a programming language
  4. Apply configuration to EC2 instances on a schedule
  5. Apply approved OS patches during a maintenance window
  6. Remove old container images automatically
  7. Detect a manual change to a CloudFormation stack
  8. Reuse a shared network across separate stacks
  9. Reference environment-specific settings without embedding secrets
  10. Declare CPU and memory for an ECS task
  11. Restore a stack after an update failure
  12. Inventory installed software on EC2
  13. Deploy the same baseline to multiple accounts and Regions
  14. Protect a production resource from accidental deletion
  15. Check container images for vulnerabilities
  16. Bring an existing resource under CloudFormation management
  17. Manage Terraform history and state safely
  18. Automate golden AMI creation and distribution
  19. Resolve subnet IP exhaustion for ECS tasks
3.3 Automate manual or repeatable processes5 questions
  1. Turn a disk-remediation procedure into one reusable runbook
  2. Read a database password during a CodeBuild run
  3. Build a patched golden AMI every month
  4. Limit rebooting maintenance to an approved window
  5. Reuse an approved operations command
4.1 Manage security and compliance controls16 questions
  1. Preview the effect of an IAM policy change
  2. Detect resources reachable by external principals
  3. Continuously detect public S3 buckets
  4. Centralize security findings
  5. Detect suspicious AWS API activity
  6. Continuously assess EC2 and ECR vulnerabilities
  7. List nodes missing approved patches
  8. Aggregate findings from multiple accounts
  9. Automatically remediate the correct security group with Config
  10. Separate trust and operating permissions for an EC2 role
  11. Restrict already-authorized S3 reads to the selected endpoint
  12. Separate CloudTrail digest delivery from actual integrity validation
  13. Prioritize vulnerability findings
  14. Remediate a Trusted Advisor security finding
  15. Continuously evaluate a standard configuration across accounts
  16. Provide console users with MFA-protected temporary permissions
4.2 Protect data and infrastructure9 questions
  1. Restrict who can use a KMS key
  2. Encrypt S3 objects with a customer managed key
  3. Rotate an RDS password automatically
  4. Start an EC2 containment procedure from a GuardDuty finding
  5. Manage the scope and termination of a KMS grant
  6. Connect to EC2 without exposing SSH
  7. Rotate a customer managed KMS key
  8. Classify stored data before selecting controls
  9. Investigate an ALB certificate name mismatch
5.1 Implement and optimize networking and connectivity21 questions
  1. Allow private-subnet instances to call an external API
  2. Allow a VPC endpoint to access only one S3 bucket
  3. Restrict an EC2 instance's outbound destinations
  4. Deny a CIDR at the subnet boundary
  5. Connect many VPCs through a central hub
  6. Create a dedicated connection from on-premises to AWS
  7. Fail over a VPN tunnel when one path fails
  8. Route requests to services by URL path
  9. Publish a TCP service with a fixed address
  10. Investigate allowed and rejected network traffic
  11. Manage overlapping VPC CIDR allocations
  12. Provide outbound IPv6 access without allowing inbound initiation
  13. Resolve EC2 public DNS names to private IPs across peered VPCs
  14. Provide resilient NAT access for private subnets
  15. Use the AWS-provided DNS resolver inside a VPC
  16. Notify operators when a VPN tunnel fails
  17. Distribute corporate DNS settings to VPC instances
  18. Resolve an AWS service name through an interface endpoint
  19. Inspect traffic between VPCs centrally
  20. Audit network protection services
  21. Reduce NAT cost for AWS service traffic
5.2 Configure domains, DNS, and content delivery12 questions
  1. Resolve private names only inside a VPC
  2. Resolve on-premises DNS names from a VPC
  3. Improve static-content cache efficiency
  4. Automatically renew a public certificate on an ALB
  5. Route clients to a healthy Region through fixed Anycast addresses
  6. Rate-limit excessive HTTP requests from one IP
  7. Allow only CloudFront to read an S3 origin
  8. Point a domain name at an ALB without tracking its IPs
  9. Deliver an updated CSS file before its TTL expires
  10. Redirect HTTP requests to HTTPS at an ALB
  11. Analyze requests served by a CloudFront distribution
  12. Audit Route 53 Resolver queries
5.3 Troubleshoot network connectivity issues5 questions
  1. Analyze a VPC path without changing configuration
  2. Correlate logs to investigate an ALB 5xx increase
  3. Investigate a CloudFront response served for the wrong user
  4. Troubleshoot a one-sided hybrid connectivity failure
  5. Use network monitoring to investigate NAT congestion