Task 3.1: Provision and Maintain Cloud Resources. SOA-C03 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is using AWS CloudFormation to deploy a three-tier web application. The template currently hard-codes the instance type for the web servers. The operations team wants to reuse the same template for development, test, and production environments, each with a different instance type. They also want to ensure that a misconfigured parameter value is rejected before the stack is created. What should the team do?

   • ACreate a separate template for each environment with the instance type hard-coded.
   • BAdd a parameter for the instance type and use a mapping to select the correct value based on the environment. Add an allowed value list to the parameter.
   • CUse a condition in the template to set the instance type based on the environment name.
   • DUse an output in the template to expose the instance type and update it manually after the stack is created.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A CloudFormation stack update fails with the error 'API: ec2:RunInstances AccessDenied'. What is the most likely cause of this deployment issue?

   • AThe subnet has insufficient IP addresses
   • BThe IAM role or user lacks permissions to launch EC2 instances
   • CThe CloudFormation template has a syntax error
   • DThe AMI ID is invalid
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A development team wants to store and manage Docker container images in a private repository on AWS. Which service should they use?

   • AAmazon S3
   • BAmazon ECR
   • CAWS EBS
   • DAWS CodeArtifact
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has a central IT account that manages a shared set of subnets in a VPC. The application teams in other AWS accounts want to launch EC2 instances directly into these shared subnets. The central IT team wants to grant access to the subnets without creating VPC peering connections or VPNs. Which solution should the central IT team use?

   • AUse AWS Resource Access Manager (RAM) to share the subnets with the application accounts.
   • BCreate an AWS PrivateLink endpoint in the central IT account and share it with the application accounts.
   • CCreate a VPC peering connection between the central IT account and each application account.
   • DUse AWS Transit Gateway to connect the VPCs and share the subnets.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is using Terraform to manage its AWS infrastructure. The team wants to migrate a set of existing resources that were created manually to be managed by Terraform. The resources include an EC2 instance and a security group. The team wants to import these resources into the Terraform state without recreating them. Which command should the team use?

   • Aterraform import
   • Bterraform refresh
   • Cterraform plan
   • Dterraform apply
   Reveal Solution Discussion Select an answer first