Crucial Exams

AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

An operations team must ensure that every Amazon EC2 instance in the production VPC is running the latest version of the CloudWatch agent with a company-approved configuration file. The solution must automatically install the agent if it is missing, reapply the configuration every hour, and generate compliance reports-all without writing or maintaining custom scripts. Which approach meets these requirements MOST effectively?

  • Configure an Amazon EventBridge rule that triggers a Systems Manager Run Command document whenever an instance starts; the document downloads and installs the agent and configuration.

  • Use Systems Manager Patch Manager with a custom patch baseline that contains the CloudWatch agent package and schedule patch scans hourly.

  • Deploy an AWS Lambda function invoked by EventBridge every hour; the function uses the SSM SendCommand API to push the agent and configuration to each instance.

  • Create a Systems Manager State Manager association that targets the production instances, uses the AWS-provided CloudWatchAgent document to install and configure the agent, and runs on an hourly schedule.

AWS Certified CloudOps Engineer Associate SOA-C03
Deployment, Provisioning, and Automation
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot