2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

AWS SOA-C03 Exam Practice Questions, practice question pack
AWS · SOA-C03

AWS SOA-C03 Exam Practice Questions

99% pass rateUpdated 1 Nov 2026200 questions2 PDFs, instant download
5.05 reviews
(5 customer reviews)

US$39

Every question with the correct answer and why the other options are wrong.

Download the free sample

Card, Apple Pay, Google Pay or PayPal. Download links are on your order page and in your email the moment you pay.

99% pass rate. Pass or your money back.Fail the exam after using this pack and we refund it, or swap it for any other pack. How the guarantee works
pass today with 854 scores and certstash questions were helpful Though.
Sami Ahmed SiddiquiSOA-C03
Category:
TRY BEFORE YOU BUY

Three of the 200 questions in this pack

Question 1

A company applies user-defined tags to resources that are associated with the company's AWS workloads. Twenty days after applying the tags, the company notices that it cannot use the tags to filter views in the AWS Cost Explorer console.

What is the reason for this issue?

  1. It takes at least 30 days to be able to use tags to filter views in Cost Explorer.
  2. The company has not activated the user-defined tags for cost allocation.
  3. The company has not created an AWS Cost and Usage Report.
  4. The company has not created a usage budget in AWS Budgets.
Show answer and explanation

Correct answer: B. The company has not activated the user-defined tags for cost allocation.

Applying user-defined tags to resources does not make them available for cost analysis on its own. The tag keys must also be activated as cost allocation tags, either on the Cost allocation tags page of the AWS Billing and Cost Management console or with the UpdateCostAllocationTagsStatus API operation. After tags are applied, a tag key can take up to 24 hours to appear on that page and up to another 24 hours to activate. Twenty days is far longer than this process requires, so the missing activation step is the cause of the problem.

Why the other options are wrong

  • A. No 30-day waiting period exists, because a tag key becomes active within about a day or two of being applied and activated.
  • C. An AWS Cost and Usage Report is a separate billing data export and is not a prerequisite for filtering by tags in Cost Explorer.
  • D. AWS Budgets tracks spending or usage against thresholds, and a usage budget has no effect on which tags are available in Cost Explorer.

Question 2

An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 instances with a baseline configuration file to capture log files. There is a new requirement to capture the DHCP log files that exist on 50 of the instances.

What is the MOST operationally efficient way to meet this new requirement?

  1. Create an additional CloudWatch agent configuration file to capture the DHCP logs. Use the AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option to apply the additional configuration file.
  2. Log in to each EC2 instance with administrator rights. Create a PowerShell script to push the needed baseline log files and DHCP log files to CloudWatch.
  3. Run the CloudWatch agent configuration file wizard on each EC2 instance. Verify that the baseline log files are included and add the DHCP log files during the wizard creation process.
  4. Run the CloudWatch agent configuration file wizard on each EC2 instance and select the advanced detail level. This will capture the operating system log files.
Show answer and explanation

Correct answer: A. Create an additional CloudWatch agent configuration file to capture the DHCP logs. Use the AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option to apply the additional configuration file.

The CloudWatch agent supports multiple configuration files. An additional file that contains only the DHCP log settings can be added to the running agent with the append-config option, which combines it with the baseline file instead of replacing it. The additional file needs a different name from the baseline file, because a file with the same name overwrites the earlier one. AWS Systems Manager Run Command then applies the change and restarts the agent on each targeted instance, and only the 50 instances that need the DHCP logs are targeted, with no interactive login. The baseline configuration on all 100 instances stays intact.

Why the other options are wrong

  • B. Logging in to each instance and maintaining a custom PowerShell script is manual work that duplicates what the installed CloudWatch agent already does.
  • C. Running the interactive wizard on each instance is slow manual work, and it rebuilds log settings that the baseline file already holds.
  • D. The detail level in the wizard selects which metrics the agent collects rather than log files, and running the wizard on each instance is manual work.

Question 3

A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created.

What should a CloudOps engineer do to meet this requirement?

  1. Configure an IAM policy that denies the s3:DeleteObject action for all users. Three months after an object is written, remove the policy.
  2. Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.
  3. Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.
  4. Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.
Show answer and explanation

Correct answer: B. Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

S3 Object Lock stores objects in a write-once-read-many model and prevents a locked object version from being deleted or overwritten during its retention period. In compliance mode, no user can delete a protected object version before the retention period ends, including the root user of the account, and the retention mode cannot be changed. The retention period also cannot be shortened. Placing the backups in a bucket with Object Lock enabled and a 3-month retention period therefore guarantees that each backup is kept for at least 3 months after it is created.

Why the other options are wrong

  • A. A single deny policy cannot track the age of each object, and removing it after 3 months would also remove the protection from newer backups.
  • C. S3 Versioning still allows a specific object version to be permanently deleted, and S3 Lifecycle rules manage transitions and expiration rather than prevent deletion.
  • D. Governance mode lets users with the s3:BypassGovernanceRetention permission delete protected objects, so it does not guarantee that the backups remain for 3 months.

See all 50 free questions Get the full pack, US$39

REVIEWS

5 reviews for AWS SOA-C03 Exam Practice Questions

  1. Sami Ahmed Siddiqui –

    pass today with 854 scores and certstash questions were helpful Though.

  2. Casper –

    Straightforward

    SOA-C03 passed on the first attempt.

  3. Amara –

    Reliable

    SOA-C03 passed Happy with this.

  4. Mateo Almeida –

    Satisfied

    Got through my SOA-C03 using this

  5. Diego Volkov –

    Very helpful

    Good resource for SOA-C03.

Only logged in customers who have purchased this product may leave a review.

How much of the AWS SOA-C03 bank is free?

200 questions in the bank

Each step includes the one before, so buying only adds new questions.

  • You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
  • 5025% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
  • 100the first half of the packHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
  • 200100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
ABOUT THIS PACK

What’s in the AWS SOA-C03 pack

  • 200 questions across all five SOA-C03 domains
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A failed SOA-C03 attempt costs another US$150. This pack is US$39, paid once, and refunded if you fail.

What makes the SOA-C03 hard

SysOps Administrator is gone: SOA-C02 retired in September 2025, and SOA-C03 relaunched the certification as CloudOps Engineer, pulling containers and roughly twenty-five new services into scope. Older SysOps banks now miss practice questions.

The exam thinks like a two a.m. pager: an Auto Scaling group that will not scale in, a private-subnet instance that cannot reach S3, a CloudWatch alarm that never fired, what broke and what is the least-effort fix. ECS and EKS operations are now explicitly tested, alongside Systems Manager automation, EventBridge remediation and multi-account patterns; there are no labs, SOA-C03 is question-only. Three domains tie at 22% each, so there is nowhere to hide a weak area.

About the exam

SOA-C03 certifies deploying, managing and operating workloads on AWS: monitoring, remediation, reliability, automation, security and networking operations. It replaced SysOps Administrator (SOA-C02, retired September 2025). Valid for three years.

Read the AWS SOA-C03 study guide

Questions before you buy

How quickly do I receive it?

Straight away. The full PDF and a questions-only copy are emailed to you the moment your payment goes through, and the same links are on your order page.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

What is your pass rate?

99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products