DEA-C01 practice questions 1–10

1. Question 1 · 313 in bank

   A data engineer is configuring an AWS Glue job to read data from an Amazon S3 bucket. The data engineer has set up the necessary AWS Glue connection details and an associated IAM role. However, when the data engineer attempts to run the AWS Glue job, the data engineer receives an error message that indicates that there are problems with the Amazon S3 VPC gateway endpoint. The data engineer must resolve the error and connect the AWS Glue job to the S3 bucket. Which solution will meet this requirement?

   • AUpdate the AWS Glue security group to allow inbound traffic from the Amazon S3 VPC gateway endpoint.
   • BConfigure an S3 bucket policy to explicitly grant the AWS Glue job permissions to access the S3 bucket.
   • CReview the AWS Glue job code to ensure that the AWS Glue connection details include a fully qualified domain name.
   • DVerify that the VPC's route table includes inbound and outbound routes for the Amazon S3 VPC gateway endpoint.

   Show answer

   Answer: D

   Explanation

   A - wrong - AWS glue - are serverless service, so it don't have any security groups B - wrong - Because we have error with VPC, not with S3 itself C - wrong - Becuase with S3 - we always have only FQDN for buckets

   Source: Adapted from community discussion — HunkyBunky

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 2 · 313 in bank

   A data engineer needs to create an AWS Lambda function that converts the format of data from .csv to Apache Parquet. The Lambda function must run only if a user uploads a .csv file to an Amazon S3 bucket. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate an S3 event notification that has an event type of s3:ObjectCreated:*. Use a filter rule to generate notifications only when the suffix includes .csv. Set the Amazon Resource Name (ARN) of the Lambda function as the destination for the event notification.
   • BCreate an S3 event notification that has an event type of s3:ObjectTagging:* for objects that have a tag set to .csv. Set the Amazon Resource Name (ARN) of the Lambda function as the destination for the event notification.
   • CCreate an S3 event notification that has an event type of s3:*. Use a filter rule to generate notifications only when the suffix includes .csv. Set the Amazon Resource Name (ARN) of the Lambda function as the destination for the event notification.
   • DCreate an S3 event notification that has an event type of s3:ObjectCreated:*. Use a filter rule to generate notifications only when the suffix includes .csv. Set an Amazon Simple Notification Service (Amazon SNS) topic as the destination for the event notification. Subscribe the Lambda function to the SNS topic.

   Show answer

   Answer: A

   Explanation

   "only if a user uploads data to an Amazon S3 bucket" that excludes B & C because we need s3:ObjectCreated:* You don't need SNS for S3 event notifications so A is easier.

   Source: Adapted from community discussion — milofficial

   References

   • AWS documentation

   Next question

3. Question 3 · 313 in bank

   An insurance company stores transaction data that the company compressed with gzip. The company needs to query the transaction data for occasional audits. Which solution will meet this requirement in the MOST cost-effective way?

   • AStore the data in Amazon Glacier Flexible Retrieval. Use Amazon S3 Glacier Select to query the data.
   • BStore the data in Amazon S3. Use Amazon S3 Select to query the data.
   • CStore the data in Amazon S3. Use Amazon Athena to query the data.
   • DStore the data in Amazon Glacier Instant Retrieval. Use Amazon Athena to query the data.

   Show answer

   Answer: B

   Explanation

   B. Store the data in Amazon S3. Use Amazon S3 Select to query the data. Amazon S3 is a cost-effective object storage service, and S3 Select allows you to retrieve only a subset of data from an object by using simple SQL expressions. S3 Select works on objects stored in CSV, JSON, or Apache Parquet format. It also supports GZIP and BZIP2 compression formats, which makes it suitable for the given scenario where the data is compressed with gzip. While Amazon Athena is a powerful query service, it can be more expensive than S3 Select for occasional queries. Amazon Glacier and Glacier Select are designed for long-term archival storage and not for frequent access or queries, which might not be suitable for occasional audits. Therefore, option B is the most cost-effective choice for this scenario.

   Source: Adapted from community discussion — bakarys

   References

   • AWS documentation

   Next question

4. Question 4 · 313 in bank

   A data engineer finished testing an Amazon Redshift stored procedure that processes and inserts data into a table that is not mission critical. The engineer wants to automatically run the stored procedure on a daily basis. Which solution will meet this requirement in the MOST cost-effective way?

   • ACreate an AWS Lambda function to schedule a cron job to run the stored procedure.
   • BSchedule and run the stored procedure by using the Amazon Redshift Data API in an Amazon EC2 Spot Instance.
   • CUse query editor v2 to run the stored procedure on a schedule.
   • DSchedule an AWS Glue Python shell job to run the stored procedure.

   Show answer

   Answer: C

   Explanation

   I go with C because it runs the query within the Redshift instance, B may not be appropriate because it involves other services on top of the Redshift instance and there is movement of data across the services.

   Source: Adapted from community discussion — andrologin

   References

   • AWS documentation

   Next question

5. Question 5 · 313 in bank

   Select 2

   A marketing company collects clickstream data. The company sends the clickstream data to Amazon Kinesis Data Firehose and stores the clickstream data in Amazon S3. The company wants to build a series of dashboards that hundreds of users from multiple departments will use. The company will use Amazon QuickSight to develop the dashboards. The company wants a solution that can scale and provide daily updates about clickstream activity. Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)

   • AUse Amazon Redshift to store and query the clickstream data.
   • BUse Amazon Athena to query the clickstream data
   • CUse Amazon S3 analytics to query the clickstream data.
   • DAccess the query data through a QuickSight direct SQL query.
   • EAccess the query data through QuickSight SPICE (Super-fast, Parallel, In-memory Calculation Engine). Configure a daily refresh for the dataset.

   Show answer

   Answer: BE

   Explanation

   B. Use Amazon Athena to query the clickstream data. E. Access the query data through QuickSight SPICE (Super-fast, Parallel, In-memory Calculation Engine). Configure a daily refresh for the dataset. Here's why: B. Use Amazon Athena to query the clickstream data: Amazon Athena allows you to run SQL queries directly on data stored in Amazon S3 without the need for complex ETL processes. It is a cost-effective solution for querying large datasets on S3. E. Access the query data through QuickSight SPICE: QuickSight SPICE is designed for fast, in-memory data analysis and can scale to support many users and large datasets. By configuring a daily refresh, you ensure that the dashboards are updated with the latest data while keeping query performance high and costs low.

   Source: Adapted from community discussion — Ja13

   Next question

6. Question 6 · 313 in bank

   A data engineer is building a data orchestration workflow. The data engineer plans to use a hybrid model that includes some on-premises resources and some resources that are in the cloud. The data engineer wants to prioritize portability and open source resources. Which service should the data engineer use in both the on-premises environment and the cloud-based environment?

   • AAWS Data Exchange
   • BAmazon Simple Workflow Service (Amazon SWF)
   • CAmazon Managed Workflows for Apache Airflow (Amazon MWAA)
   • DAWS Glue

   Show answer

   Answer: C

   Explanation

   C. Amazon Managed Workflows for Apache Airflow (Amazon MWAA) Amazon MWAA is a managed service for Apache Airflow, which is an open-source workflow automation tool. Apache Airflow can be used both on-premises and in the cloud, making it ideal for hybrid environments. Using Amazon MWAA allows the data engineer to leverage the managed service in the cloud while maintaining the ability to use the same open-source Airflow setup on-premises, ensuring portability and consistency across environments.

   Source: Adapted from community discussion — Ja13

   Next question

7. Question 7 · 313 in bank

   A gaming company uses a NoSQL database to store customer information. The company is planning to migrate to AWS. The company needs a fully managed AWS solution that will handle high online transaction processing (OLTP) workload, provide single-digit millisecond performance, and provide high availability around the world. Which solution will meet these requirements with the LEAST operational overhead?

   • AAmazon Keyspaces (for Apache Cassandra)
   • BAmazon DocumentDB (with MongoDB compatibility)
   • CAmazon DynamoDB
   • DAmazon Timestream

   Show answer

   Answer: C

   Explanation

   Amazon DynamoDB is the most appropriate choice given the company's requirements for high performance, global availability, and minimal operational overhead.

   Source: Adapted from community discussion — tgv

   Next question

8. Question 8 · 313 in bank

   A data engineer creates an AWS Lambda function that an Amazon EventBridge event will invoke. When the data engineer tries to invoke the Lambda function by using an EventBridge event, an AccessDeniedException message appears. How should the data engineer resolve the exception?

   • AEnsure that the trust policy of the Lambda function execution role allows EventBridge to assume the execution role.
   • BEnsure that both the IAM role that EventBridge uses and the Lambda function's resource-based policy have the necessary permissions.
   • CEnsure that the subnet where the Lambda function is deployed is configured to be a private subnet.
   • DEnsure that EventBridge schemas are valid and that the event mapping configuration is correct.

   Show answer

   Answer: B

   Explanation

   The lambda resource based policy must allow the events principle to invoke the lambda function. https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-run-lambda-schedule.html#eb-schedule-create-rule and https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-run-lambda-schedule.html#eb-schedule-create-rule Amazon SQS, Amazon SNS, Lambda, CloudWatch Logs, and EventBridge bus targets do not use roles, and permissions to EventBridge must be granted via a resource policy.

   Source: Adapted from community discussion — artworkad

   References

   • AWS documentation

   Next question

9. Question 9 · 313 in bank

   A company uses a data lake that is based on an Amazon S3 bucket. To comply with regulations, the company must apply two layers of server-side encryption to files that are uploaded to the S3 bucket. The company wants to use an AWS Lambda function to apply the necessary encryption. Which solution will meet these requirements?

   • AUse both server-side encryption with AWS KMS keys (SSE-KMS) and the Amazon S3 Encryption Client.
   • BUse dual-layer server-side encryption with AWS KMS keys (DSSE-KMS).
   • CUse server-side encryption with customer-provided keys (SSE-C) before files are uploaded.
   • DUse server-side encryption with AWS KMS keys (SSE-KMS).

   Show answer

   Answer: B

   Explanation

   The most crucial objective in the problem is "Two layers of server-side encryption must be applied." A: SSE-KMS is a single-layer server-side encryption that uses AWS KMS keys to encrypt data. The Amazon S3 Encryption Client performs client-side encryption, not server-side encryption. C: SSE-C is server-side encryption that uses customer-provided encryption keys to encrypt data. This does not provide two layers of encryption. D: SSE-KMS is a single-layer server-side encryption. It does not meet the encryption requirement of two layers of encryption. B: DSSE-KMS (dual-layer server-side encryption) uses two layers of encryption to encrypt data using keys managed by AWS KMS. The first layer is used to encrypt the data key, and the second layer is used to encrypt the actual data. This provides the two layers of server-side encryption required to meet compliance requirements.

   Source: Adapted from community discussion — samadal

   References

   • AWS documentation
   • AWS documentation

   Next question

10. Question 10 · 313 in bank

    A data engineer notices that Amazon Athena queries are held in a queue before the queries run. How can the data engineer prevent the queries from queueing?

    • AIncrease the query result limit.
    • BConfigure provisioned capacity for an existing workgroup.
    • CUse federated queries.
    • DAllow users who run the Athena queries to an existing workgroup.

    Show answer

    Answer: B

    Explanation

    B. Configure provisioned capacity for an existing workgroup. Provisioned capacity in Amazon Athena allows you to allocate dedicated query processing capacity to a workgroup. This helps ensure that your queries are run without being held in a queue, providing more consistent and predictable performance.

    Source: Adapted from community discussion — Ja13

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DEA-C01 practice, question 1. 313 questions available.