AWS Certified CloudOps Engineer - Associate Exam
65-question written exam with multiple-choice and multiple-response question types.
- Type
- Written
- Delivery
- Both
- Duration
- 130 min
- Questions
- 65
Passing score: 720 Scaled score on a 100 to 1,000 scale
Exam sections
Domain 1: Monitoring, Logging, Analysis, Remediation, and Performance Optimization
Covers implementing metrics, alarms, and filters via CloudWatch and CloudTrail. It involves analyzing performance metrics to identify and remediate issues using automation tools like EventBridge and Systems Manager, as well as optimizing compute, storage, and database resources.
Question notes
Multiple-choice and multiple-response questions testing monitoring, logging, and optimization skills.
Preparation tips
Practice configuring CloudWatch agents and master the use of EventBridge for automated remediation actions.
Domain 2: Reliability and Business Continuity
Focuses on implementing scalability and elasticity through Auto Scaling and caching. It covers high availability and resilience via Multi-AZ and ELB, as well as backup and restore strategies for various AWS services using AWS Backup and disaster recovery procedures.
Question notes
Multiple-choice and multiple-response questions regarding high availability and recovery strategies.
Preparation tips
Study Multi-AZ architectures, Route 53 health checks, and point-in-time database restoration methods.
Domain 3: Deployment, Provisioning, and Automation
Addresses provisioning and maintaining cloud resources using AMIs, container images, CloudFormation, and AWS CDK. It includes multi-account resource sharing via AWS RAM, remediating deployment issues, and automating operational processes with event-driven Lambda functions.
Question notes
Multiple-choice and multiple-response questions on infrastructure-as-code and automation deployment.
Preparation tips
Master CloudFormation stack sets and practice using Systems Manager Automation to manage existing resources.
Domain 4: Security and Compliance
Addresses security and compliance tool implementation, including IAM roles, MFA, and federated identity. It covers data protection through KMS encryption, secrets management, auditing access issues, and meeting compliance requirements using AWS Security Hub and Config.
Question notes
Multiple-choice and multiple-response questions concerning security controls and auditing compliance.
Preparation tips
Focus on IAM policy conditions, multi-account security strategies, and remediation actions from security service findings.
Domain 5: Networking and Content Delivery
Covers configuring VPC networking features like subnets, NACLs, and security groups. It includes managing Route 53 DNS and routing policies, content delivery via CloudFront and Global Accelerator, and troubleshooting VPC, hybrid, and private connectivity issues.
Question notes
Multiple-choice and multiple-response questions regarding network configuration and connectivity troubleshooting.
Preparation tips
Practice VPC flow log analysis and identifying CloudFront caching issues while configuring routing policies.
