3.0 Deployment, Provisioning, and Automation SOA-C03 Practice Quiz
110 exam-style questions covering 22% of the SOA-C03 exam. Instant feedback on every answer, progress tracking, no signup required.
This domain is part of the AWS Certified CloudOps Engineer Associate practice test. Each question is tagged by exam objective and difficulty so you can drill exactly the areas you need.
Sample Questions
A CloudOps engineer needs a repeatable process to build hardened Amazon Machine Images with current patches and validation tests. Which service should be used?
- A. Amazon EC2 Image Builder
- B. AWS Backup
- C. Amazon Route 53
- D. AWS WAF
AMI and container image management is best addressed by Amazon EC2 Image Builder, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
A CloudOps team wants every new EC2 instance to launch from the latest approved image without manual image lookup. Which approach helps?
- A. Publish the approved AMI ID to Systems Manager Parameter Store and reference it during launch
- B. Use a Route 53 hosted zone for AMI IDs
- C. Use AWS Cost Explorer tags only
- D. Use GuardDuty findings as launch parameters
AMI and container image management is best addressed by Publish the approved AMI ID to Systems Manager Parameter Store and reference it during launch, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
A team needs to store and scan container images before ECS deployments. Which AWS service is most appropriate?
- B. Amazon Elastic Container Registry
- A. Amazon EFS
- C. AWS CloudTrail Lake
- D. Amazon SES
AMI and container image management is best addressed by Amazon Elastic Container Registry, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
A container image tag named latest caused an ECS service to deploy an unexpected version. What practice reduces this risk?
- B. Use immutable image tags or image digests in deployment definitions
- A. Disable CloudWatch metrics
- C. Enable S3 Transfer Acceleration
- D. Create a VPC peering connection
AMI and container image management is best addressed by Use immutable image tags or image digests in deployment definitions, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
A container deployment fails because the task execution role cannot pull an image from a private ECR repository. What should be fixed?
- B. Grant the required ECR pull permissions to the task execution role
- A. Change the ALB idle timeout
- C. Enable S3 bucket versioning
- D. Create a Route 53 health check
AMI and container image management is best addressed by Grant the required ECR pull permissions to the task execution role, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
An AMI pipeline should fail if compliance checks do not pass after installing updates. What should the engineer add?
- C. A validation or test phase in the EC2 Image Builder pipeline
- A. A CloudFront cache behavior
- B. A Route 53 weighted record
- D. An S3 Lifecycle expiration rule
AMI and container image management is best addressed by A validation or test phase in the EC2 Image Builder pipeline, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
An EC2 Image Builder recipe installs a package from the internet, but private build instances have no egress path. What should be corrected?
- C. Provide controlled network access or internal package repositories for the build environment
- A. Change the CloudFormation stack name
- B. Enable DynamoDB point-in-time recovery
- D. Create an ACM certificate
AMI and container image management is best addressed by Provide controlled network access or internal package repositories for the build environment, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
A container image must be promoted from development to production only after vulnerability scanning passes. Which workflow fits?
- D. Use ECR image scanning results as a promotion gate in the deployment process
- A. Copy the image to an EBS snapshot
- B. Create an IAM password policy
- C. Increase the Auto Scaling maximum capacity
AMI and container image management is best addressed by Use ECR image scanning results as a promotion gate in the deployment process, because it matches the provisioning, deployment, or automation requirement in the scenario. This is the correct answer.
Key Terms in This Domain
- CloudFormation StackSets: Deploy and manage stacks across multiple accounts and Regions
- CloudWatch dashboards: Customizable, shareable views of metrics and alarms across accounts and Regions
- Multi-Region deployment: Spread resources across Regions for disaster recovery and latency
- Amazon EC2 Image Builder: Automated AMI and container image build pipelines
- IAM Identity Center: Centralized SSO across AWS accounts and applications
- IAM Access Analyzer: Identify unintended public or cross-account resource access
- Amazon GuardDuty: Continuous threat detection across AWS accounts and workloads
- AWS Organizations: Centrally manage policies and billing across many AWS accounts
- AWS Resource Access Manager (RAM): Securely share resources across AWS accounts
- Multi-AZ deployment: Spread resources across Availability Zones for fault tolerance
Link to this quiz
Studying with a group or teaching a class? Send this address or paste the link into your notes, wiki, or course page:
https://quizbuffet.com/aws-cloudops-engineer-associate/deployment-provisioning-and-automation/
<a href="https://quizbuffet.com/aws-cloudops-engineer-associate/deployment-provisioning-and-automation/">AWS CloudOps Engineer Associate Deployment, Provisioning, and Automation practice quiz on QuizBuffet</a>
Other SOA-C03 Domains
- 1.0 Monitoring, Logging, Analysis, Remediation, and Performance Optimization
- 2.0 Reliability and Business Continuity
- 4.0 Security and Compliance
- 5.0 Networking and Content Delivery
← Back to SOA-C03 practice test overview
Questions are written against the published SOA-C03 objectives and checked for accuracy and balance before they go live. How QuizBuffet writes and reviews its questions.