An application in a VPC cannot communicate with another application in a different VPC that is connected via a transit gateway. Which configuration element is most likely to be incorrectly configured if the transit gateway attachment is in the 'available' state?

Network ACL in the transit gateway

Security group on the transit gateway

A company uses CloudFront to serve a dynamic web application. The origin is an Application Load Balancer. The company recently changed the application to return personalized content based on the 'User-Agent' header. Users report that they see content intended for other devices. What is the most likely cause?

The origin is returning a 'Cache-Control: no-cache' header, causing CloudFront to not cache responses.

The CloudFront distribution is configured to compress content, altering the 'User-Agent' header.

CloudFront is not forwarding the 'User-Agent' header to the origin, so the origin returns a generic response.

CloudFront is caching responses without considering the 'User-Agent' header in the cache key.

A company has an AWS Site-to-Site VPN connection between its on-premises network and a VPC. The VPN status shows 'UP', but instances in the VPC cannot ping on-premises servers. The on-premises firewall logs show that encrypted traffic is arriving, but no decrypted traffic is forwarded to the internal network. What is the most likely cause?

The security group for the instances does not allow inbound ICMP from the on-premises network.

The VPN tunnel is using the wrong pre-shared key, causing the tunnel to be up but not passing traffic.

The VPC route table does not have a route to the on-premises network via the virtual private gateway.

The on-premises firewall is not configured to route decrypted traffic to the internal network.

AWSCertified CloudOps Engineer - Associate

Domain 5Objective 3

Task 5.3: Troubleshoot Network Connectivity Issues. SOA-C03 Practice Questions (Page 3)

Part of the Content Domain 5: Networking and Content Delivery domain, which makes up ~20% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

5concepts

Questions 11–14

11foundation · easy
An application in a VPC cannot communicate with another application in a different VPC that is connected via a transit gateway. Which configuration element is most likely to be incorrectly configured if the transit gateway attachment is in the 'available' state?
Select an answer first
12expert · hard
A company uses CloudFront to serve a dynamic web application. The origin is an Application Load Balancer. The company recently changed the application to return personalized content based on the 'User-Agent' header. Users report that they see content intended for other devices. What is the most likely cause?
Select an answer first
13application · medium
A company has an AWS Site-to-Site VPN connection between its on-premises network and a VPC. The VPN status shows 'UP', but instances in the VPC cannot ping on-premises servers. The on-premises firewall logs show that encrypted traffic is arriving, but no decrypted traffic is forwarded to the internal network. What is the most likely cause?
Select an answer first
14foundation · easy
A CloudFront distribution is configured to cache objects based on the 'Cache-Control' header from the origin. The origin is sending 'Cache-Control: max-age=3600'. How long will CloudFront cache the object at the edge?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.

Task 5.3: Troubleshoot Network Connectivity Issues. SOA-C03 Practice Questions (Page 3)

Questions 11–14

An application in a VPC cannot communicate with another application in a different VPC that is connected via a transit gateway. Which configuration element is most likely to be incorrectly configured if the transit gateway attachment is in the 'available' state?

A CloudFront distribution is configured to cache objects based on the 'Cache-Control' header from the origin. The origin is sending 'Cache-Control: max-age=3600'. How long will CloudFront cache the object at the edge?

Keep studying — Content Domain 5: Networking and Content Delivery