A company's application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53.
Which Route 53 record should be created to address this requirement?
A. A record B. Alias record C. CNAME record D. Pointer (PTR) record
C. CNAME record
Explanation
When mapping one domain name to another domain name that is hosted outside AWS, a CNAME record is the correct DNS record type. CNAME records map an alias name (www.company.com) to a canonical domain name (app.example.com).
Alias records cannot be used to point to non-AWS resources. A and PTR records map IP addresses, not domain names, and are therefore not appropriate.
Because www.company.com is not the zone apex, a CNAME record is valid and supported. This solution requires no additional infrastructure and is the standard DNS approach for this scenario.
Question 22:
A CloudOps engineer is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The application generates write-intensive traffic with variable and sudden increases in client connections.
Which solution should the CloudOps engineer choose to meet these requirements?
A. Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys. Use RDS Proxy. B. Configure AWS KMS to rotate keys. Use RDS read replicas. C. Configure AWS Secrets Manager to rotate credentials. Use RDS Proxy . D. Configure AWS Secrets Manager to rotate credentials. Use RDS read replicas.
C. Configure AWS Secrets Manager to rotate credentials. Use RDS Proxy .
Explanation
AWS Secrets Manager is designed to securely store and automatically rotate database credentials. It integrates natively with Amazon RDS and supports scheduled credential rotation without application changes.
RDS Proxy manages database connections by pooling and reusing connections, which is critical for write- intensive workloads with sudden spikes in client connections. It improves scalability and reduces database resource exhaustion.
KMS rotates encryption keys, not database credentials. Read replicas do not help with write scaling or connection spikes.
Therefore, Secrets Manager combined with RDS Proxy is the correct solution.
Question 23:
A company has a multi-account AWS environment that includes the following: A central identity account that contains all IAM users and groups Several member accounts that contain IAM roles
A SysOps administrator must grant permissions for a particular IAM group to assume a role in one of the member accounts.
How should the SysOps administrator accomplish this task?
A. In the member account, add sts:AssumeRole permissions to the role's policy. In the identity account, add a trust policy to the group that specifies the account number of the member account. B. In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account, add an inline policy to the group with sts:AssumeRole permissions. C. In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account, add an inline policy to the group with sts:PassRole permissions. D. In the member account, add the group Amazon Resource Name (ARN) to the role's inline policy. In the identity account, add a trust policy to the group with sts:AssumeRole permissions.
B. In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account, add an inline policy to the group with sts:AssumeRole permissions.
Question 24:
A company needs to upload gigabytes of files daily to Amazon S3 and requires higher throughput and faster upload speeds.
Which action should a CloudOps engineer take?
A. Create an Amazon CloudFront distribution with the GET HTTP method allowed and the S3 bucket as an origin. B. Create an Amazon ElastiCache cluster and enable caching for the S3 bucket. C. Set up AWS Global Accelerator and configure it with the S3 bucket. D. Enable S3 Transfer Acceleration and use the acceleration endpoint when uploading files.
D. Enable S3 Transfer Acceleration and use the acceleration endpoint when uploading files.
Explanation
The AWS Cloud Operations and Storage documentation confirms that S3 Transfer Acceleration is designed to increase upload speed for objects transferred to S3 buckets over long distances. It uses AWS Global Edge Network and Amazon CloudFront edge locations to route data through optimized network paths, reducing latency and achieving higher throughput compared to standard S3 uploads. After enabling Transfer Acceleration on the bucket, users upload files to the accelerated endpoint (e.g., bucketname.s3-accelerate.amazonaws.com). This feature requires no changes to application logic besides endpoint modification and provides immediate performance improvement. CloudFront (Option A) is for content delivery, not uploads. ElastiCache (Option B) and Global Accelerator (Option C) are unrelated to S3 upload performance.
Thus, Option D is correct -enable S3 Transfer Acceleration for faster, optimized file uploads.
AWS Cloud Operations & Storage Guide - Enhancing Upload Speed with Amazon S3 Transfer Acceleration
Question 25:
A company is migrating a legacy application to AWS. The application runs on EC2 instances across multiple Availability Zones behind an Application Load Balancer (ALB). The target group routing algorithm is set to weighted random, and the application requires session affinity (sticky sessions).
After deployment, users report random application errors that were not present before migration, even though target health checks are passing.
Which solution will meet this requirement?
A. Set the routing algorithm of the target group to least outstanding requests. B. Turn on anomaly mitigation for the target group. C. Turn off the cross-zone load balancing attribute of the target group. D. Increase the deregistration delay attribute of the target group.
A. Set the routing algorithm of the target group to least outstanding requests.
Explanation
AWS Cloud Operations and Elastic Load Balancing documentation Application Load Balancer (ALB) supports multiple routing algorithms to distribute requests among targets:
Round robin (default)
Least outstanding requests (LOR)
Weighted random
When applications require session affinity, AWS recommends using "least outstanding requests" as the load balancing algorithm because it reduces latency, distributes load evenly, and ensures consistent target responsiveness during high traffic.
Using weighted random routing with sticky sessions can cause sessions to be routed inconsistently if one target's capacity fluctuates, leading to session mismatches and application errors - especially when user sessions rely on instance-specific state.
Disabling cross-zone balancing (Option C) or adjusting deregistration delay (Option D) does not address routing inconsistency. Anomaly mitigation (Option B) protects against target performance degradation, not sticky-session misrouting.
Therefore, the correct solution is Option A - changing the target group's routing algorithm to least outstanding requests ensures smoother, predictable session handling and resolves random application errors.
A company needs to automate operational tasks on EC2 instances by running a standardized procedure (for example, restart a service, update a config file, and verify status). The CloudOps engineer wants a repeatable, auditable workflow.
Which solution will meet these requirements?
A. Use Systems Manager Automation runbooks. B. Use SSH and run commands manually on each instance. C. Use CloudTrail to replay API calls. D. Use Amazon S3 Batch Operations to run shell commands on instances.
A. Use Systems Manager Automation runbooks.
Explanation
Systems Manager Automation runbooks provide a structured, repeatable workflow for operational tasks, with execution history, logging, and the ability to integrate approvals and parameters. This supports consistent operations at scale and aligns with auditability requirements because executions are tracked and can be reviewed.
Manual SSH is not scalable and lacks standardized execution control. CloudTrail records API calls but does not execute OS-level operational procedures. S3 Batch Operations acts on S3 objects, not on instance-level service operations.
AWS Systems Manager - Automation runbooks for operational workflows
Question 27:
A company runs an application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company must tolerate the loss of an Availability Zone with minimal downtime and without changing the application's endpoint.
Which solution will meet these requirements?
A. Deploy the instances in a single Availability Zone and enable EC2 instance recovery. B. Deploy the instances in an Auto Scaling group that spans multiple Availability Zones and register the group with an ALB target group. C. Use a spread placement group in one Availability Zone. D. Create an AMI and manually launch replacement instances in a different Availability Zone if needed.
B. Deploy the instances in an Auto Scaling group that spans multiple Availability Zones and register the group with an ALB target group.
Explanation
To tolerate an Availability Zone failure, the workload must run across multiple Availability Zones and have automated capacity replacement. An Auto Scaling group that spans multiple Availability Zones provides automated instance replacement and balancing across AZs. When integrated with an ALB target group, the ALB continues to serve traffic using the same DNS name (endpoint), routing only to healthy targets, and the Auto Scaling group replaces unhealthy or lost capacity automatically. Instance recovery addresses underlying host impairment for a single instance and does not provide AZ- level resilience. Placement groups in one AZ do not provide AZ fault tolerance. Manual processes are slow and do not meet minimal downtime requirements.
Amazon EC2 Auto Scaling + Elastic Load Balancing - Multi-AZ high availability
Question 28:
A company with millions of subscribers needs to automatically send notifications every Saturday. The company already uses Amazon SNS to send messages but has historically sent them manually.
Which solution will meet these requirements in the MOST operationally efficient way?
A. Launch a new Amazon EC2 instance. Configure a cron job to use the AWS SDK to send an SNS notification to subscribers every Saturday. B. Create a rule in Amazon EventBridge that triggers every Saturday. Configure the rule to publish a notification to an SNS topic. C. Create an SNS subscription to a message fanout that sends notifications to subscribers every Saturday. D. Use AWS Step Functions scheduling to run a step every Saturday. Configure the step to publish a message to an SNS topic.
B. Create a rule in Amazon EventBridge that triggers every Saturday. Configure the rule to publish a notification to an SNS topic.
Explanation
AWS Cloud Operations and Event Management documentation Amazon EventBridge provides native scheduling capabilities that can trigger events at defined intervals-such as weekly, daily, or cron-based schedules.
Creating an EventBridge rule that runs every Saturday and publishes a message to an SNS topic fully automates the notification process without maintaining servers or manual jobs. This approach is serverless, highly reliable, and fully managed by AWS.
By contrast:
EC2 cron jobs (Option A) require instance management, patching, and cost overhead. SNS subscriptions (Option C) handle message delivery, not scheduling. Step Functions (Option D) are designed for complex workflows, not simple scheduled triggers. Thus, Option B provides the most operationally efficient CloudOps solution by integrating EventBridge scheduled events with SNS topics for automated, recurring notifications.
AWS Cloud Operations & Event Automation Guide - Scheduling Tasks and Notifications Using EventBridge and SNS
Question 29:
A company has an application running on EC2 that stores data in an Amazon RDS for MySQL Single-AZ DB instance.
The application requires both read and write operations, and the company needs failover capability with minimal downtime.
Which solution will meet these requirements?
A. Modify the DB instance to be a Multi-AZ DB instance deployment. B. Add a read replica in the same Availability Zone where the DB instance is deployed. C. Add the DB instance to an Auto Scaling group that has a minimum capacity of 2 and a desired capacity of 2. D. Use RDS Proxy to configure a proxy in front of the DB instance.
A. Modify the DB instance to be a Multi-AZ DB instance deployment.
Explanation
the AWS Cloud Operations and Database Reliability documentation, Amazon RDS Multi-AZ deployments provide high availability and automatic failover by maintaining a synchronous standby replica in a different Availability Zone.
In the event of instance failure, planned maintenance, or Availability Zone outage, Amazon RDS automatically promotes the standby to primary with minimal downtime (typically less than 60 seconds). The failover is transparent to applications because the DB endpoint remains the same. By contrast, read replicas (Option B) are asynchronous and do not provide automated failover. Auto Scaling (Option C) applies to EC2, not RDS. RDS Proxy (Option D) improves connection management but does not add redundancy.
Thus, Option A - converting the RDS instance into a Multi-AZ deployment - delivers the required high availability and business continuity with minimal operational effort.
A CloudOps engineer must ensure that all Amazon EBS snapshots are retained even if the originating CloudFormation stack is deleted. The snapshots must be created automatically during stack deletion.
Which CloudFormation feature should be used?
A. Stack termination protection B. DeletionPolicy: Retain C. DeletionPolicy: Snapshot D. UpdateReplacePolicy: Retain
C. DeletionPolicy: Snapshot
Explanation
For Amazon EBS volumes and RDS resources, DeletionPolicy: Snapshot instructs CloudFormation to automatically create a final snapshot when the stack is deleted. Retain leaves the resource intact but does not guarantee a snapshot. Termination protection only blocks deletion. UpdateReplacePolicy applies during resource replacement, not stack deletion.
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Amazon exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your SOA-C03 exam preparations
and Amazon certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.