A company uses CloudFront to distribute a web application. The origin is an Application Load Balancer. After a recent deployment, users report that they see outdated content. The operations team checks CloudFront logs and sees that the cache hit ratio is high. What is the most likely cause?

The cache behavior has a default TTL that is too long, and the origin is not sending cache-control headers to override it.

The cache behavior is set to cache based on query strings, and the application uses dynamic URLs.

The origin is returning a 'Cache-Control: max-age=0' header, which prevents caching.

The cache behavior is set to forward all headers, causing CloudFront to cache multiple versions of the same object.

A CloudOps engineer needs to monitor the number of bytes sent and received by a NAT gateway. Which CloudWatch metric should be used?

BytesOutToSource and BytesOutToDestination

ActiveConnections and IdleTimeoutCount

AWSCertified CloudOps Engineer - Associate

Domain 5Objective 3

Task 5.3: Troubleshoot Network Connectivity Issues. SOA-C03 Practice Questions (Page 1)

Part of the Content Domain 5: Networking and Content Delivery domain, which makes up ~20% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

5concepts

Questions 1–5

1application · medium
A company uses CloudFront to distribute a web application. The origin is an Application Load Balancer. After a recent deployment, users report that they see outdated content. The operations team checks CloudFront logs and sees that the cache hit ratio is high. What is the most likely cause?
Select an answer first
2foundation · easy
A CloudOps engineer is troubleshooting why an EC2 instance in a private subnet cannot reach the internet. Which AWS component is specifically designed to enable outbound internet access for instances in private subnets while preventing unsolicited inbound traffic?
Select an answer first
3foundation · easy
A CloudOps engineer needs to monitor the number of bytes sent and received by a NAT gateway. Which CloudWatch metric should be used?
Select an answer first
4foundation · easy
A CloudOps engineer wants to be notified when network traffic to an EC2 instance exceeds a certain threshold. Which CloudWatch feature should be used to trigger the notification?
Select an answer first
5foundation · easy
A CloudOps engineer is investigating why an application behind an Application Load Balancer (ALB) is returning HTTP 503 errors. Which log source would provide the most direct information about the requests received by the ALB and the responses sent back to clients?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.

Task 5.3: Troubleshoot Network Connectivity Issues. SOA-C03 Practice Questions (Page 1)

Questions 1–5

A company uses CloudFront to distribute a web application. The origin is an Application Load Balancer. After a recent deployment, users report that they see outdated content. The operations team checks CloudFront logs and sees that the cache hit ratio is high. What is the most likely cause?

A CloudOps engineer is troubleshooting why an EC2 instance in a private subnet cannot reach the internet. Which AWS component is specifically designed to enable outbound internet access for instances in private subnets while preventing unsolicited inbound traffic?

A CloudOps engineer needs to monitor the number of bytes sent and received by a NAT gateway. Which CloudWatch metric should be used?

A CloudOps engineer wants to be notified when network traffic to an EC2 instance exceeds a certain threshold. Which CloudWatch feature should be used to trigger the notification?

A CloudOps engineer is investigating why an application behind an Application Load Balancer (ALB) is returning HTTP 503 errors. Which log source would provide the most direct information about the requests received by the ALB and the responses sent back to clients?

Keep studying — Content Domain 5: Networking and Content Delivery