A company has a VPC with IPv6 enabled. They have EC2 instances in a private subnet that need to make outbound IPv6 connections to the internet to download software updates. The instances should not be reachable from the internet. Which resource should be used to enable this?

An egress-only internet gateway

What is the primary purpose of AWS WAF?

To provide a firewall for network traffic at the VPC level.

To filter DNS queries for resources in a VPC.

To protect your VPC from DDoS attacks at the network layer.

To protect web applications from common web exploits that could affect availability, compromise security, or consume excessive resources.

Which component is automatically included in the default VPC of an AWS account?

An egress-only internet gateway

What is the purpose of AWS Shield?

To protect AWS resources from distributed denial of service (DDoS) attacks.

To provide a firewall for network traffic at the VPC level.

To protect web applications from common web exploits.

To filter DNS queries for resources in a VPC.

AWSCertified CloudOps Engineer - Associate

Domain 5Objective 1

Task 5.1: Implement and Optimize Networking Features and Connectivity. SOA-C03 Practice Questions (Page 5)

Part of the Content Domain 5: Networking and Content Delivery domain, which makes up ~20% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

12concepts

Questions 21–25

21application · medium
A company has a VPC with IPv6 enabled. They have EC2 instances in a private subnet that need to make outbound IPv6 connections to the internet to download software updates. The instances should not be reachable from the internet. Which resource should be used to enable this?
Select an answer first
22application · medium
A company has a public-facing web application behind an Application Load Balancer (ALB). They have noticed a high number of requests to a specific URL path that is causing a spike in CPU usage on the backend instances. They want to block these requests at the edge. Which AWS service should they use?
Select an answer first
23foundation · easy
What is the primary purpose of AWS WAF?
Select an answer first
24foundation · easy
Which component is automatically included in the default VPC of an AWS account?
Select an answer first
25foundation · easy
What is the purpose of AWS Shield?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.