What is a domain list in the context of Route 53 Resolver DNS Firewall?

A collection of domains that you want to allow or block in DNS queries.

A list of DNS servers that are allowed to resolve queries.

A list of AWS services that are allowed to use DNS.

A list of IP addresses that are allowed to make DNS queries.

Which statement correctly describes the stateful nature of security groups in AWS?

Security groups can only be associated with EC2 instances, not other AWS resources.

If you allow inbound traffic, the outbound return traffic is automatically allowed, regardless of outbound rules.

You must explicitly allow both inbound and outbound traffic for a connection to work.

Security groups evaluate rules in numerical order and stop at the first rule that matches.

What is the primary purpose of a Virtual Private Cloud (VPC) in AWS?

To provide a fully managed DNS service that translates domain names into IP addresses.

To provide a scalable, high-performance, and cost-effective object storage service for any amount of data.

To provide a global content delivery network (CDN) that securely delivers data, videos, applications, and APIs to customers worldwide.

To provide a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.

What is the purpose of an internet gateway (IGW) in a VPC?

To provide a target in the route table for internet-bound traffic from public subnets.

To enable instances in private subnets to initiate outbound traffic to the internet.

To provide a DNS resolution service for resources in the VPC.

To filter traffic between subnets in the same VPC.

What is the difference between AWS Shield Standard and AWS Shield Advanced?

Shield Standard is only available for resources in a VPC, while Shield Advanced is available for all AWS resources.

Shield Standard only protects against network-layer attacks, while Shield Advanced protects against application-layer attacks.

Shield Standard is a manual service that requires configuration, while Shield Advanced is fully automated.

Shield Standard is automatically enabled for all AWS customers at no additional cost, while Shield Advanced provides enhanced protections and additional features for a fee.

AWSCertified CloudOps Engineer - Associate

Domain 5Objective 1

Task 5.1: Implement and Optimize Networking Features and Connectivity. SOA-C03 Practice Questions (Page 1)

Part of the Content Domain 5: Networking and Content Delivery domain, which makes up ~20% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

12concepts

Questions 1–5

1foundation · easy
What is a domain list in the context of Route 53 Resolver DNS Firewall?
Select an answer first
2foundation · easy
Which statement correctly describes the stateful nature of security groups in AWS?
Select an answer first
3foundation · easy
What is the primary purpose of a Virtual Private Cloud (VPC) in AWS?
Select an answer first
4foundation · easy
What is the purpose of an internet gateway (IGW) in a VPC?
Select an answer first
5foundation · easy
What is the difference between AWS Shield Standard and AWS Shield Advanced?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.