Free SOA-C03 Exam Dumps

Question 16

A company has two AWS accounts connected by a transit gateway. Each account has one VPC in the same AWS Region. The company wants to simplify inbound and outbound rules in security groups by referencing security group IDs instead of IP CIDR blocks.
Which solution will meet this requirement?

A. Create VPC peering connections and remove the transit gateway.
B. Enable security group referencing support on the transit gateway.
C. Enable security group referencing support on each transit gateway attachment.
D. Deploy private NAT gateways in each VPC.

Correct Answer:C

Question 17

A company uses AWS Organizations to manage its AWS environment. The company implements a process that uses prebuilt Amazon Machine Images (AMIs) to launch instances as a security measure. All AMIs are tagged automatically with a key named ApprovedAMI.
The company wants to ensure that employees can use only the approved prebuilt AMIs to launch new instances.
Which solution will meet this requirement?

A. Implement a tag policy for the company's organization to require users to set the ApprovedAMI tag to launch new EC2 instances.
B. Implement an IAM policy that includes an aws:ResourceTag/ApprovedAMI condition.
C. Set up an AWS Config required-tags rule to prevent users from launching any nonapproved AMIs.
D. Use Amazon GuardDuty to constantly monitorDefenseEvasion:EC2/UnusualDoHActivity findings.

Correct Answer:B

Question 19

A company runs a business application on more than 300 Linux-based instances. Each instance has the AWS Systems Manager Agent (SSM Agent) installed. The company expects the number of instances to grow in the future. All business application instances have the same user-defined tag.
A CloudOps engineer wants to run a command on all the business application instances to download and install a package from a private repository. To avoid overwhelming the repository, the CloudOps engineer wants to ensure that no more than 30 downloads occur at one time.
Which solution will meet this requirement in the MOST operationally efficient way?

A. Use a secondary tag to create 10 batches of 30 instances eac
B. Use a Systems Manager Run Command document to download and install the packag
C. Run each batch one time.
D. Use an AWS Lambda function to automatically run a Systems Manager Run Command documen
E. Set reserved concurrency for the Lambda function to 30.
F. Use a Systems Manager Run Command document to download and install the package.Use rate control to set concurrency to 30. Specify the target by using the user-defined tag.
G. Use a parallel workflow state in AWS Step Function
H. Set the number of parallel states to 30.

Correct Answer:C

Question 20

A company has a microservice that runs on a set of Amazon EC2 instances. The EC2 instances run behind an Application Load Balancer (ALB).
A CloudOps engineer must use Amazon Route 53 to create a record that maps the ALB URL to example.com.
Which type of record will meet this requirement?

A. An A record
B. An AAAA record
C. An alias record
D. A CNAME record

Correct Answer:C

Free SOA-C03 Exam Dumps

Question 16

Question 17

Question 18

Question 19

Question 20