Free SOA-C03 Exam Dumps

Question 6

A company uses AWS Organizations to manage multiple AWS accounts. A CloudOps engineer must identify all IPv4 ports open to 0.0.0.0/0 across the organization??s accounts.
Which solution will meet this requirement with the LEAST operational effort?

A. Use the AWS CLI to print all security group rules for review.
B. Review AWS Trusted Advisor findings in an organizational view for the Security Groups – Specific Ports Unrestricted check.
C. Create an AWS Lambda function to gather security group rules from all account
D. Aggregate the findings in an Amazon S3 bucket.
E. Enable Amazon Inspector in each accoun
F. Run an automated workload discovery job.

Correct Answer:B

Question 7

A global company runs a critical primary workload in the us-east-1 Region. The company wants to ensure business continuity with minimal downtime in case of a workload failure. The company wants to replicate the workload to a second AWS Region.
A CloudOps engineer needs a solution that achieves a recovery time objective (RTO) of less than 10 minutes and a zero recovery point objective (RPO) to meet service level agreements.
Which solution will meet these requirements?

A. Implement a pilot light architecture that provides real-time data replication in the second Regio
B. Configure Amazon Route 53 health checks and automated DNS failover.
C. Implement a warm standby architecture that provides regular data replication in a second Regio
D. Configure Amazon Route 53 health checks and automated DNS failover.
E. Implement an active-active architecture that provides real-time data replication across two Region
F. Use Amazon Route 53 health checks and a weighted routing policy.
G. Implement a custom script to generate a regular backup of the data and store it in an S3 bucket that is in a second Regio
H. Use the backup to launch the application in the second Region in the event of a workload failure.

Correct Answer:C

Question 9

A CloudOps engineer wants to provide access to AWS services by attaching an IAM policy to multiple IAM users. The CloudOps engineer also wants to be able to change the policy and create new versions.
Which combination of actions will meet these requirements? (Select TWO.)

A. Add the users to an IAM service-linked rol
B. Attach the policy to the role.
C. Add the users to an IAM user grou
D. Attach the policy to the group.
E. Create an AWS managed policy.
F. Create a customer managed policy.
G. Create an inline policy.

Correct Answer:BD

Question 10

A company has an AWS CloudFormation template that includes an AWS::EC2::Instance resource and a custom resource (Lambda function). The Lambda function fails because it runs before the EC2 instance is launched.
Which solution will resolve this issue?

A. Add a DependsOn attribute to the custom resourc
B. Specify the EC2 instance in the DependsOn attribute.
C. Update the custom resource's service token to point to a valid Lambda function.
D. Update the Lambda function to use the cfn-response module to send a response to the custom resource.
E. Use the Fn::If intrinsic function to check for the EC2 instance before the custom resource runs.

Correct Answer:A

Free SOA-C03 Exam Dumps

Question 6

Question 7

Question 8

Question 9

Question 10