A company runs a global application that must be accessible via a fixed set of IP addresses for firewall allow-listing. The application is deployed in two AWS Regions, and the company wants to route traffic to the region with the lowest latency while also providing automatic failover. The company also wants to use traffic dialing to gradually shift traffic between regions. Which AWS service should the company use?

Route 53 with latency-based routing and health checks

AWS Global Accelerator with traffic dials

Route 53 with weighted routing and health checks

CloudFront with a custom origin and Lambda@Edge

A company uses CloudFront to serve a website that has both static content and dynamic API endpoints. The static content rarely changes, but the API responses are user-specific and should not be cached. How should the company configure the CloudFront distribution?

Use Lambda@Edge to modify the TTL based on the request path.

Create one cache behavior for all content with a TTL of 0.

Create one cache behavior for all content with a long TTL.

Create two cache behaviors: one for static content with a long TTL and one for API paths with a TTL of 0.

A company has a hybrid network with an AWS VPC and an on-premises data center connected via AWS Direct Connect. The company uses a custom DNS namespace for internal services, and the on-premises DNS servers must resolve names in that namespace. The company also wants the VPC to resolve on-premises hostnames. Which combination of Route 53 Resolver components should the company configure?

Create a private hosted zone and attach it to the VPC, then configure a forwarding rule on the hosted zone.

Create only an inbound endpoint in the VPC and configure a forwarding rule on it.

Create an inbound endpoint in the VPC and an outbound endpoint in the VPC, then configure forwarding rules on the outbound endpoint.

Create only an outbound endpoint in the VPC and configure a forwarding rule on it.

AWSCertified CloudOps Engineer - Associate

Domain 5Objective 2

Task 5.2: Configure Domains, DNS Services, and Content Delivery. SOA-C03 Practice Questions (Page 4)

Part of the Content Domain 5: Networking and Content Delivery domain, which makes up ~20% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

7concepts

Questions 16–20

16expert · hard
A company runs a global application that must be accessible via a fixed set of IP addresses for firewall allow-listing. The application is deployed in two AWS Regions, and the company wants to route traffic to the region with the lowest latency while also providing automatic failover. The company also wants to use traffic dialing to gradually shift traffic between regions. Which AWS service should the company use?
Select an answer first
17foundation · easy
A company needs to restrict access to a specific file in an S3 bucket that is served through CloudFront. The company wants to allow only users with a temporary URL that expires after 5 minutes. Which CloudFront feature should be used?
Select an answer first
18foundation · easy
A company runs a hybrid network with an on-premises data center connected to AWS via AWS Direct Connect. The on-premises DNS servers need to resolve records for private hosted zones in Amazon Route 53. Which Route 53 Resolver component should be configured to forward DNS queries from on-premises to the VPC?
Select an answer first
19application · medium
A company uses CloudFront to serve a website that has both static content and dynamic API endpoints. The static content rarely changes, but the API responses are user-specific and should not be cached. How should the company configure the CloudFront distribution?
Select an answer first
20application · medium
A company has a hybrid network with an AWS VPC and an on-premises data center connected via AWS Direct Connect. The company uses a custom DNS namespace for internal services, and the on-premises DNS servers must resolve names in that namespace. The company also wants the VPC to resolve on-premises hostnames. Which combination of Route 53 Resolver components should the company configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.

Task 5.2: Configure Domains, DNS Services, and Content Delivery. SOA-C03 Practice Questions (Page 4)

Questions 16–20

A company needs to restrict access to a specific file in an S3 bucket that is served through CloudFront. The company wants to allow only users with a temporary URL that expires after 5 minutes. Which CloudFront feature should be used?

A company uses CloudFront to serve a website that has both static content and dynamic API endpoints. The static content rarely changes, but the API responses are user-specific and should not be cached. How should the company configure the CloudFront distribution?

Keep studying — Content Domain 5: Networking and Content Delivery