πŸ”

DEA-C01 β€” questions

Page 16 of 16 Β· 313 total questions.

Topic 1 Β· Question 302

A company needs a solution that restricts access to Amazon S3 data and encrypts the data by using AWS managed keys. The solution must manage database credentials that an AWS Lambda function uses and must rotate the credentials automatically. Which solution will meet these requirements?

  • AUse S3 bucket policies to control access. Use server-side encryption with Amazon S3 managed keys (SSE-S3) to encrypt the data. Store the database credentials as Lambda environment variables.
  • BUse IAM policies to control access. Use server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the data. Configure AWS Secrets Manager to store and automatically rotate the credentials by using a Lambda function. (correct answer)
  • CUse S3 ACLs to control access. Use server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the data. Store the credentials in AWS Systems Manager Parameter Store and automatically rotate the credentials by using a Lambda function.
  • DUse IAM policies to control access. Use server-side encryption with Amazon S3 managed keys (SSE-S3) to encrypt the data. Store the credentials in AWS Systems Manager Parameter Store. Configure a scheduled Lambda function to rotate the credentials.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use IAM policies to control access. Use server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the data. Configure AWS Secrets Manager to store and automatically rotate the credentials by using a Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

Topic 1 Β· Question 303

A company needs to store semi-structured transactional data for an application in a database. The database must be serverless. The application writes the data infrequently, but it reads the data frequently. The application must retrieve the data within milliseconds. Which solution will meet these requirements with the LEAST operational overhead?

  • AStore the data in an Amazon S3 Standard bucket. Enable S3 Transfer Acceleration.
  • BStore the data in an Amazon S3 Apache Iceberg table. Enable S3 Transfer Acceleration.
  • CStore the data in an Amazon RDS for MySQL cluster. Configure RDS Optimized Reads for the cluster.
  • DStore the data in an Amazon DynamoDB table. Configure a DynamoDB Accelerator cache. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Store the data in an Amazon DynamoDB table. Configure a DynamoDB Accelerator cache.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. DynamoDB Accelerator (DAX) adds an in-memory cache for microsecond DynamoDB reads. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 304

An application uses an AWS Lambda function that is configured with managed runtimes. The Lambda function successfully writes logs to the default Amazon CloudWatch Logs log group. A data engineer wants to modify the logging behavior to show only ERROR level logs for application logs and WARN level logs for system logs. Which solution will meet these requirements?

  • AAdd additional permissions to the Lambda execution role.
  • BSet the log level to ERROR in the Lambda function code. (correct answer)
  • CConfigure the Lambda function to use the JSON log format.
  • DConfigure the Lambda function to send logs to a custom log group.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set the log level to ERROR in the Lambda function code.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

Topic 1 Β· Question 305

A company uses AWS Step Functions to orchestrate a data pipeline. The company has configured the Step Functions logs to push to Amazon CloudWatch Logs when the log level is FATAL The company has enabled logs for all AWS services in the pipeline. A state named "preprocessing" invokes an AWS Lambda function named "preprocessing." The Lambda function preprocesses data before proceeding to the next state. The company needs to find error details if an error occurs during the data preprocessing. Which CloudWatch Logs log group should the company check to find the error details?

  • AThe Step Functions TaskFailed event in the /aws/vendedlogs/states log group
  • BThe AWS CloudTrail logs SendTaskFailure event in the CloudTrail/logs/preprocessing log group
  • CThe Lambda logs in the laws/lambda/preprocessing log group (correct answer)
  • DThe Step Functions TaskSucceeded event in the /aws/vendedlogs/states log group
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: The Lambda logs in the laws/lambda/preprocessing log group

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

Topic 1 Β· Question 306

A media streaming company is moving its application to AWS. The company wants to avoid data quality issues in user engagement analytics. The company needs to be able to reprocess several days of historical data without duplicates and without interrupting current real-time processing. Which solution will meet these requirements?

  • AConfigure Amazon Kinesis Data Streams with extended retention. Implement idempotent consumers with Amazon DynamoDB checkpointing. Use separate processing paths for replay data and real-time data. (correct answer)
  • BConfigure Amazon Kinesis Data Streams with standard retention. Implement idempotent consumers with Amazon RDS checkpointing. Use separate processing paths with conditional logic for replay data and real-time data.
  • CConfigure Amazon Kinesis Data Streams with standard retention. Implement idempotent consumers with Amazon DynamoDB checkpointing. Use shared processing paths with conditional logic for replay data and real-time data.
  • DConfigure Amazon Kinesis Data Streams with extended retention. Implement idempotent consumers with Amazon RDS checkpointing. Use shared processing paths for replay data and real-time data.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure Amazon Kinesis Data Streams with extended retention. Implement idempotent consumers with Amazon DynamoDB checkpointing. Use separate processing paths for replay data and real-time data.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Kinesis Data Streams ingests and processes high-volume real-time streaming data. Amazon Kinesis ingests and processes real-time streaming data at scale. This option meets the real-time / low-latency performance requirement.

Topic 1 Β· Question 307

A global ecommerce company occasionally receives customer data files in its Amazon S3 data lake. The company needs to automatically detect new data and mask sensitive data before making the data available to the company's analytics team. Which solution will meet these requirements with the LEAST operational overhead?

  • AConfigure Amazon S3 Event Notifications to detect the new data and trigger an AWS Glue job. Use Amazon Macie to detect and mask the sensitive data. Store the processed data in Amazon Redshift.
  • BUse Amazon Managed Streaming for Apache Kafka (Amazon MSK) to detect incoming data. Use Amazon EMR workflows to detect and mask sensitive data. Store the processed data in Amazon S3.
  • CUse Amazon Kinesis Data Streams to capture new data. Use Amazon Comprehend to detect and mask the sensitive data. Store the processed data in Amazon DynamoDB tables.
  • DUse Amazon EventBridge to detect new data and run AWS Glue workflows. Use AWS Glue DataBrew to detect and mask the sensitive data. Store the processed data in an S3 bucket. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon EventBridge to detect new data and run AWS Glue workflows. Use AWS Glue DataBrew to detect and mask the sensitive data. Store the processed data in an S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

Topic 1 Β· Question 308

A company uses Amazon SageMaker AI for its machine learning (ML) workflows. The company is organized into several project groups that use sensitive data. The company needs to give the project groups the ability to discover available datasets across different AWS accounts. The solution must maintain access controls and track all data access for compliance purposes. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon SageMaker Assets to publish, discover, and request access to datasets through the asset catalog with approval workflows that track data access. (correct answer)
  • BSet up Amazon SageMaker Feature Store with cross-account access policies to automatically share data between AWS accounts without requiring approval workflows.
  • CSet up IAM roles for each project group with permissions to access all datasets across all AWS accounts. Use AWS CloudTrail to record data access activity.
  • DCreate separate Amazon SageMaker Studio domains for each project group with isolated environments and no ability to share data between domains.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Amazon SageMaker Assets to publish, discover, and request access to datasets through the asset catalog with approval workflows that track data access.

Explanation

Amazon SageMaker builds, trains and deploys machine learning models in a fully managed service.

Topic 1 Β· Question 309

A company has an application that is deployed on AWS. The application uses Amazon Simple Notification Service (Amazon SNS) with multiple topics. The company's security team needs to be able to audit all Publish and PublishBatch API actions for all the SNS topics. The company's application team and security team must also be able to query the audit data. The company has already established an event data store in AWS CloudTrail Lake to collect all events. Which solution will meet these requirements with the LEAST operational overhead?

  • AEnable management events for the SNS topics. Create a table in AWS Glue Data Catalog. Query the data by using Amazon Athena.
  • BEnable management events for the SNS topics. Use CloudTrail Lake to query the audit data.
  • CEnable data events for the SNS topics. Use CloudTrail Lake to query the audit data. (correct answer)
  • DEnable data events for the SNS topics. Create a table in AWS Glue Data Catalog. Query the data by using Amazon Athena.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Enable data events for the SNS topics. Use CloudTrail Lake to query the audit data.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS CloudTrail records API activity for auditing and governance.

Topic 1 Β· Question 310

A data engineer needs to validate the quality of files that are uploaded to an Amazon S3 bucket every day. The files are in CSV and JSON formats and schema variations exist. The data engineer needs a repeatable process to monitor data quality metrics such as null values, format inconsistencies, and outliers. The process must provide reusable rule-based profiling and scale across multiple datasets with minimal manual effort or custom code. Which solution will meet these requirements?

  • AUse AWS Glue Studio to create a daily extract, transform, and load (ETL) pipeline that merges datasets and applies validation logic by using PySpark transformations.
  • BUse AWS Glue extract, transform, and load (ETL) jobs with dynamic frames and the ResolveChoice class to align schemas and detect structural differences between files.
  • CUse AWS Glue DataBrew to configure profiling jobs and reusable recipe actions. Schedule the profiling jobs and reusable recipe actions to run against each dataset in Amazon S3. (correct answer)
  • DUse AWS Glue DataBrew to generate profiling dashboards for each dataset. Monitor quality metrics through manual review.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Glue DataBrew to configure profiling jobs and reusable recipe actions. Schedule the profiling jobs and reusable recipe actions to run against each dataset in Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 311

A company needs a solution to process streaming data by using Apache Spark in a Kubernetes environment. The solution must support event-driven scaling and optimize resource utilization. The company needs to integrate the solution with existing Kubernetes infrastructure deployed on Amazon Elastic Kubernetes Service (Amazon EKS). Which solution will meet these requirements with the LEAST operational overhead?

  • ADeploy self-managed Apache Spark on Amazon EKS by using custom auto-scaling policies based on Kubernetes Event-Driven Autoscaling (KEDA) operators.
  • BUse Amazon EMR on Amazon EKS with Kubernetes Event-Driven Autoscaling (KEDA) for event-driven scaling of Spark applications. (correct answer)
  • CUse Amazon EMR on Amazon EKS with the Kubernetes Cluster Autoscaler to scale Spark applications based on metrics events generated by the Kubernetes Metrics Server.
  • DImplement Apache Spark on Amazon EKS with AWS Auto Scaling groups and custom scaling policies based on metrics events collected by the Kubernetes Metrics Server.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon EMR on Amazon EKS with Kubernetes Event-Driven Autoscaling (KEDA) for event-driven scaling of Spark applications.

Explanation

Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. Amazon EMR runs big-data frameworks like Spark and Hadoop on managed clusters.

Topic 1 Β· Question 312

A legal company is building a data pipeline to power an application that will handle peak traffic during business hours. The application will provide information about relevant laws and available lawyers. The legal document database will be updated one time each day. The application must display up-to-date lawyer availability from a calendar database and provide complex full-text search of legal documents. The company wants to use AWS Glue for extract, transform, and load (ETL) processes. Lawyer availability information must be current within 5 minutes of any schedule changes. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS Step Functions to orchestrate AWS Glue jobs with time-based triggers and event-based triggers. Store processed data in Amazon S3. Use Amazon RDS for the search functionality.
  • BUse AWS Step Functions to orchestrate AWS Glue jobs with time-based triggers and event-based triggers. Store processed data in Amazon S3. Use Amazon OpenSearch Service for full-text search capabilities. (correct answer)
  • CUse AWS Glue workflows with time-based triggers and event-based triggers. Store processed data in Amazon DynamoDB. Create a custom search solution by using AWS Lambda functions.
  • DUse Amazon EventBridge to schedule all AWS Glue jobs. Store processed data in Amazon RDS. Use Amazon Kendra for full-text search capabilities.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS Step Functions to orchestrate AWS Glue jobs with time-based triggers and event-based triggers. Store processed data in Amazon S3. Use Amazon OpenSearch Service for full-text search capabilities.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Step Functions coordinates multi-step workflows as a managed state machine. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

Topic 1 Β· Question 313

A data engineer needs to deploy a serverless data pipeline. In the pipeline, CSV files are uploaded to an Amazon S3 bucket, which invokes an AWS Lambda function. The Lambda function transforms the CSV files to JSON format and stores the results in a second S3 bucket. The data engineer has created an AWS Serverless Application Model (AWS SAM) template that includes the Lambda function. The data engineer wants to use AWS SAM for the pipeline deployment. Which solution will package and deploy this serverless data pipeline?

  • AAdd the first S3 bucket and the S3 event source for the Lambda function to the SAM template. Run the sam build command to prepare the deployment package. Run the sam deploy --guided command to deploy the pipeline. (correct answer)
  • BRun the sam deploy command directly with the --s3-bucket parameter to deploy the Lambda function code. Manually configure the S3 event trigger in the AWS Management Console.
  • CAdd the first S3 bucket to the SAM template. Run the sam package template to upload the Lambda function code to Amazon S3. Create an AWS CloudFormation stack from the packaged template. Configure event notifications manually.
  • DAdd the first S3 bucket and the S3 event source for the Lambda function to the SAM template. Run the sam build command followed by the aws cloudformation deploy command to deploy the pipeline.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add the first S3 bucket and the S3 event source for the Lambda function to the SAM template. Run the sam build command to prepare the deployment package. Run the sam deploy --guided command to deploy the pipeline.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 314

A company stores objects in an Amazon S3 bucket. The company crawls the objects so that Amazon Athena can query the data. A data engineer manually moved all objects from the partition with a path prefix of status=01 to the prefix status=02. The status=01 partition location is now empty. However, the status=01 partition location still appears in the AWS Glue Data Catalog metadata. Which Athena command should the data engineer run to resolve the metadata discrepancy?

  • AMSCK REPAIR TABLE
  • BALTER TABLE DROP PARTITION (correct answer)
  • CALTER TABLE SET TBLPROPERTIES
  • DALTER TABLE CHANGE COLUMN
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: ALTER TABLE DROP PARTITION.

Showing questions 301–313 of 313 Β· Page 16 of 16