EN简体繁體
Sign in
Home / AWS / SOA-C03
AWS · SOA-C03

SOA-C03 Exam Practice Questions

AWS Certified CloudOps Engineer – Associate

SOA-C03 English PDF practice questions: 200 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For cloud operators maintaining AWS workloads, continuity, security, networking, performance and costs.

AWS has announced changes to language availability. Check the official page for affected languages and dates.

Exam code
SOA-C03
Official exam / credential
AWS Certified CloudOps Engineer – Associate
Exam format
Single-answer and multiple-response questions
Exam duration
130 minutes
Official exam questions
65 questions
Official exam languages
English, Japanese, Korean, Simplified Chinese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
Try before you buy

First 20 practice questions

200 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 6

Question#6Topic1

A company is migrating a legacy application to AWS. The company manually installs and configures the legacy application on Amazon EC2 instances across multiple Availability Zones. The company sets up an Application Load Balancer (ALB) for the application. The company sets the target group routing algorithm to weighted random. The application requires session affinity.
After the company deploys the application, users report random application errors that were not present in the legacy version of the application. The target group health checks do not show any failures. The company must resolve the application errors.
Which solution will meet this requirement?

  1. A. Set the routing algorithm of the target group to least outstanding requests.
  2. B. Turn on anomaly mitigation for the target group.
  3. C. Turn off the cross-zone load balancing attribute of the target group.
  4. D. Increase the deregistration delay attribute of the target group.
Show answer

Answer

A

Question 7

Question#7Topic1

A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A CloudOps engineer needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster.
Which solution will meet these requirements?

  1. A. Create an Aurora Replica. Promote the replica to replace the primary DB instance.
  2. B. Create an AWS Lambda function to restore an automatic backup to the existing DB cluster.
  3. C. Use backtracking to rewind the existing DB cluster to the desired recovery point.
  4. D. Use point-in-time recovery to restore the existing DB duster to the desired recovery point.
Show answer

Answer

C

Question 8

Question#8Topic1

A CloudOps engineer is troubleshooting an AWS CloudFormation stack creation that failed. Before the CloudOps engineer can identify the problem, the stack and its resources are deleted. For future deployments, the CloudOps engineer must preserve any resources that CloudFormation successfully created.
What should the CloudOps engineer do to meet this requirement?

  1. A. Set the value of the DisableRollback parameter to False during stack creation.
  2. B. Set the value of the OnFailure parameter to DO_NOTHING during stack creation.
  3. C. Specify a rollback configuration that has a rollback trigger of DO_NOTHING during stack creation
  4. D. Set the value of the OnFailure parameter to ROLLBACK during stack creation.
Show answer

Answer

B

Question 9

Question#9Topic1

A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancing (ELB) load balancer. The company’s security team wants to protect the website by using AWS Certificate Manager (ACM) certificates. The load balancer must automatically redirect any HTTP requests to HTTPS.
Which solution will meet these requirements?

  1. A. Create an Application Load Balancer that has one HTTPS listener on port 80. Attach an SSL/TLS certificate to listener port 80. Create a rule to redirect requests from HTTP to HTTPS.
  2. B. Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocol listener on port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
  3. C. Create an Application Load Balancer that has two TCP listeners on port 80 and port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
  4. D. Create a Network Load Balancer that has two TCP listeners on port 80 and port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
Show answer

Answer

B

Question 10

Question#10Topic1

A company uses AWS Organizations to manage a set of AWS accounts. The company has set up organizational units (OUs) in the organization. An application OU supports various applications.
A CloudOps engineer must prevent users from launching Amazon EC2 instances that do not have a CostCenter-Project tag into any account in the application OU. The restriction must apply only to accounts in the application OU.
Which solution will meet these requirements?

  1. A. Create an IAM group that has a policy that allows the ec2:RunInstances action when the CostCenter-Project tag is present. Place all IAM users who need access to the application accounts in the IAM group.
  2. B. Create a service control policy (SCP) that denies the oc2:RunInstances action when the CostCenter-Project tag is missing. Attach the SCP to the application OU.
  3. C. Create an IAM role that has a policy that allows the oc2:RunInstances action when the CostCenter-Project tag is present. Attach the IAM role to the IAM users that are in the application OU accounts.
  4. D. Create a service control policy (SCP) that denies the ec2:RunInstances action when the CostCenter-Project tag is missing. Attach the SCP to the root OU.
Show answer

Answer

B

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, your library shows the download link and exact expiry time.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification