SOA-C03 · Associate

AWS Certified CloudOps Engineer - Associate

Prepare to operate AWS workloads with better visibility, resilience and control.

Start Free

Your free account includes a full SOA-C03 practice exam.

ExamNova practice

Your first session

Questions: 65
Time limit: 130 min
Coverage: 5 domains

Practise, review your answers and see where to focus next.

Preview a question

Is SOA-C03 your next step?

For cloud operations and systems administration roles. CloudOps Engineer focuses on deploying, managing and operating AWS environments, including the investigation and recovery work that follows deployment.

Observe and investigate

Choose monitoring signals and work through the evidence behind operational incidents.

Maintain resilient workloads

Compare availability, backup and recovery approaches against service requirements.

Automate routine operations

Connect infrastructure deployment, network configuration and security controls to repeatable operations.

Official certification guide ↗

What you’ll study

Explore the domains and topics in your ExamNova study path.

Monitoring, Logging, Analysis, Remediation, and Performance Optimization22% practice balance

Explore Monitoring, Logging, Analysis, Remediation, and Performance Optimization

Implement Metrics, Alarms, and Filters by Using AWS Monitoring and Logging Services

Analyzing High-Cardinality Data
Anomaly Detection in CloudWatch
CloudTrail and VPC Flow Log Auditing
CloudWatch Metrics and Unified Agent
Glue Log ETL and Data Catalog
Kinesis and CloudWatch Log Ingestion
Log Querying with CloudWatch Insights
OpenSearch Log Search and Delivery
Visualizing Metrics with CloudWatch Explorer
WAF Logging and Rule Investigation
X-Ray Distributed Tracing and Correlation

Identify and Remediate Issues by Using Monitoring and Availability Metrics

AWS DevOps Agent
Compliance Monitoring with AWS Config
Event-Driven Automation with EventBridge
Kiro
Remediation with Security Hub and Lambda
Service Health Monitoring and Alerts
Workflow Automation with Step Functions

Implement Performance Optimization Strategies for Compute, Storage, and Database Resources

Amazon S3 Files
Compute Optimizer and Trusted Advisor Rightsizing
DynamoDB Accelerator for Low-Latency Reads
Edge and Network Performance
ElastiCache for in-Memory Application Caching
Performance Monitoring and Optimization Reviews
S3 and EBS Performance Tuning

Reliability and Business Continuity22% practice balance

Explore Reliability and Business Continuity

Implement Scalability and Elasticity

Auto Scaling and Fault Injection
Database Scalability and Placement
Load Balancing Techniques

Implement Highly Available and Resilient Environments

DNS Routing and Traffic Management
Data Replication Strategies

Implement Backup and Restore Strategies

AWS Backup Plans and Cross-Account Backup
DynamoDB Point-in-Time Recovery
EBS Snapshot Lifecycle Management
Hybrid Backup and AMI Recovery
Long-Term Retention and Immutable Backups

Deployment, Provisioning, and Automation22% practice balance

Explore Deployment, Provisioning, and Automation

Provision and Maintain Cloud Resources

Automated Application Deployment
CI/CD Pipeline Automation
Container Deployment Strategies
Governance with Control Tower
Infrastructure as Code with CloudFormation
Multi-Account Provisioning with StackSets
Programmatic Infrastructure with CDK
Source Control for Deployment
Standardized Deployment Solutions
Standardized Infrastructure Provisioning
Terraform for Multi-Cloud Infrastructure

Automate the Management of Existing Resources

AWS Systems Manager Overview
Automating Tasks with AWS Lambda
Dynamic Configuration with AppConfig
Managing Packages with CodeArtifact
Orchestrating Workflows with Step Functions

Security and Compliance16% practice balance

Explore Security and Compliance

Implement and Manage Security and Compliance Tools and Policies

Centralized Security Operations
Compliance Monitoring and Reporting
Data Protection and Threat Investigation
Identity and Access Management Policies
Resource Sharing and Governance

Implement Strategies to Protect Data and Infrastructure

Centralized Security Policy Management
Data Integrity and Storage Protection
Key Management and Secrets Handling
Network Security Fundamentals
Private Connectivity Solutions
Web Application Protection Strategies

Networking and Content Delivery18% practice balance

Explore Networking and Content Delivery

Implement and Optimize Networking Features and Connectivity

Client VPN and Gateway Solutions
Site-to-Site and Direct Connectivity Options
Transit Gateway Architecture and Routing
Virtual Private Cloud Fundamentals

Configure Domains, DNS Services, and Content Delivery

AWS WAF and Application Load Balancer
Amazon Route 53 Overview
Content Delivery with Amazon CloudFront
Elastic Load Balancing Fundamentals
Global Accelerator Routing Policies
Lambda@Edge Customization

Troubleshoot Network Connectivity Issues

Network Management and Monitoring

Percentages show ExamNova’s practice balance. Consult the official guide for the vendor’s current exam outline.

Try focused practice

Explore a topic with sample questions and explanations.

Provision and Maintain Cloud Resources Implement Backup and Restore Strategies Implement Metrics, Alarms, and Filters by Using AWS Monitoring and Logging Services Configure Domains, DNS Services, and Content Delivery Implement Scalability and Elasticity Implement Strategies to Protect Data and Infrastructure Automate the Management of Existing Resources Implement and Manage Security and Compliance Tools and Policies Elastic Load Balancing Fundamentals Deployment, Provisioning, and Automation Monitoring, Logging, Analysis, Remediation, and Performance Optimization Reliability and Business Continuity Networking and Content Delivery Security and Compliance

Try a question before you start.

Read the scenario. Consider your answer, then reveal the reasoning.

For an operational scenario, establish what changed, what the monitoring shows and which action addresses the cause.

An operations team wants automatic continuous backups for a DynamoDB table so the table can be restored to a recent point before an accidental bad write. Which feature should they enable?

Amazon SQS long polling
AWS CloudShell session history
DynamoDB point-in-time recovery
Elastic Load Balancing cross-zone routing

Show answer and explanations

Amazon SQS long polling — SQS long polling reduces empty queue responses and does not back up DynamoDB tables.

AWS CloudShell session history — CloudShell session history is unrelated to DynamoDB backup and restore.

DynamoDB point-in-time recovery — DynamoDB point-in-time recovery provides continuous backups and lets you restore table data to a selected point in the recovery window.

Elastic Load Balancing cross-zone routing — Elastic Load Balancing distributes traffic and does not provide table recovery.

A clearer way to prepare.

One place to practise, understand your results and plan the next session.

Practise with purpose

Start with your free exam. Explore Exam, Endless and Custom practice modes as you build your study routine.

Understand the answer

Review the reasoning behind your answers and return to the decisions that need another look.

Find your next focus

Use domain-level performance and readiness to see strengths, gaps and areas you have yet to assess.

Put it into practice.

Explore hands-on tasks connected to SOA-C03. These are real Labs from the catalogue.

Lab

Roll the API fleet without losing capacity

Repair refresh-fleet.sh. Keep the api-production group, Rolling strategy, and launch template lt-0a13d9c4e8f7246bb. Pin version 7, keep 100% of desired capacity healthy while allowing up to 150% temporary capacity, skip matching instances, and automatically roll back when api-refresh-errors enters ALARM.

medium · About 12 min

Lab

Constrain payroll decryption to its context

Repair key-policy.json so the only decryption it permits is the payroll reconciler acting on production payroll ciphertext. The worker runs as arn:aws:iam::111122223333:role/payroll-reconciler. Production payroll ciphertext is encrypted with an AppName of payroll-reconciler and an Environment of production, and a caller must not be able to satisfy the policy by supplying additional encryption context. Keep policy version 2012-10-17 and the "*" resource, since the policy is attached to the key itself.

hard · About 15 min

Make SOA-C03 your next step.

Create your free account. Start practising.

Start Free