AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

A company runs 50 Linux EC2 instances whose application data resides on attached EBS volumes. Security policy mandates encrypted, daily backups that must be retained for 35 days and automatically copied to a secondary AWS Region. The operations team wants a fully managed, scalable solution with minimal custom code or scripts. Which approach satisfies the requirements with the LEAST operational effort?

  • Create an AWS Backup plan that selects the EC2 instances by tag, enables default KMS encryption, sets a 35-day retention rule, and configures cross-Region copy to a backup vault in the secondary Region.

  • Schedule an AWS Lambda function with EventBridge that calls the CreateSnapshot API for each EBS volume, encrypts the snapshot, copies it to the target Region, and deletes snapshots older than 35 days.

  • Attach a Data Lifecycle Manager policy to each EBS volume to create encrypted daily snapshots, retain them for 35 days, and enable cross-Region copy.

  • Use EC2 Image Builder to create daily AMIs for the instances, share the AMIs to the secondary Region, and configure lifecycle policies to delete images after 35 days.

AWS Certified CloudOps Engineer Associate SOA-C03
Reliability and Business Continuity
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot