Implement and optimize networking features and connectivity.
11 practice questions under this official exam objective (SOA-C03) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
How Do You Ramp ALB Traffic Gradually During EC2 Cache Warm-Up?
ALB target group slow start mode exists precisely to ramp a newly registered target's traffic share linearly instead of handing it an equal share the
How to Provide SSH Access to a Private EC2 Instance Without Internet Exposure?
This question tests how to provide SSH access to a private EC2 instance without an internet gateway by using an EC2 Instance Connect endpoint. The pag
How Can a VPC Lambda Access S3 Without Public IP Addresses?
A VPC-attached Lambda function can reach Amazon S3 privately through an S3 interface VPC endpoint, which places an elastic network interface in the La
How Should You Load Test a New CloudFront Distribution?
CloudFront load testing must simulate real global clients by using multiple geographic regions, independent DNS resolution, and spreading requests acr
Why Are EC2 Instances in One AZ Not Receiving ALB Traffic?
An Application Load Balancer only routes traffic into Availability Zones whose subnets are attached to it, so healthy instances in an unassociated AZ
How Do eu-central-1 EC2 Instances Connect to a us-east-1 Database?
Cross-Region VPC peering is the most operationally efficient way to connect the eu-central-1 EC2 instances to the us-east-1 database when the database
How to Balance TCP Port 1028 Across Three EC2 Instances?
This question tests load balancer selection for a custom TCP port (1028) spanning three Availability Zones with the least operational overhead. The an
How do IPv6-only EC2 instances get outbound-only internet access?
IPv6-only EC2 instances that must reach the internet without being reachable from it require an egress-only internet gateway plus a route table entry
How Do Private Subnet EC2 Instances Get Internet Access via NAT?
Private-subnet EC2 instances reach the internet only when a NAT gateway sits in the public subnet and the private subnet's route table points 0.0.0.0/
How Should Traffic Route Only to Healthy Application Servers?
This SOA-C03 scenario tests how to keep a three-tier application highly available by monitoring application-server health and routing traffic only to
Secure SSH Access to Private EC2 Instances
This question addresses secure remote access to resources in a private subnet. The correct solution involves establishing a trusted encrypted tunnel b