AWSCertified CloudOps Engineer - Associate
Domain 4Objective 1
Task 4.1: Implement and Manage Security and Compliance Tools and Policies. SOA-C03 Practice Questions (Page 3)
Part of the Content Domain 4: Security and Compliance domain, which makes up ~17% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)
36questions here
8free pages
16concepts
Questions 11–15
- 11
Which AWS service records API activity in an AWS account, including who made the request, when, and from which IP address, for auditing and troubleshooting?
Select an answer first - 12
Which AWS feature allows users to sign in to AWS using credentials from an existing corporate identity provider, such as Active Directory?
Select an answer first - 13
A company wants to receive a single bill for all its AWS accounts. Which feature of AWS Organizations enables this?
Select an answer first - 14
A security engineer is investigating a potential security incident. They suspect that an IAM user in a member account deleted an S3 bucket. The engineer has access to the management account and needs to find the exact API call that deleted the bucket. Which steps should they take?
Select an answer first - 15
A security engineer runs IAM Access Analyzer and receives a finding that an S3 bucket in the production account is shared with an external AWS account (account ID 123456789012). The bucket policy is shown to allow s3:GetObject to that account. The engineer must determine whether this is an actual risk and remediate it. The bucket is used to host a public website. What should the engineer do FIRST?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.