Amazon AWS

AWS Certified Data Engineer – Associate

DEA-C01

The AWS Certified Data Engineer – Associate (DEA-C01) exam validates your skills in data engineering on AWS. It is suitable for those who want to demonstrate their ability to design and implement data solutions.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 91–100 of 498

Q91

A company needs to analyze large datasets in real-time. Which AWS service should they use?

  • A Kinesis Data Streams
  • B S3 Select
  • C CloudFormation
  • D QuickSight
Explanation Kinesis Data Streams enables real-time data processing, while S3 Select and QuickSight are for querying and visualization, not real-time analytics.
Q92

You are configuring a VPC with public and private subnets. Which service allows you to host a web application in a public subnet securely?

  • A Elastic Load Balancer
  • B Lambda Functions
  • C EC2 Instances
  • D NAT Gateway
Explanation EC2 Instances can host web applications in public subnets, whereas ELB distributes traffic, NAT Gateway enables internet access for private subnets, and Lambda is serverless.
Q93

What happens when you set a bucket policy that denies all actions to no authenticated users in S3?

  • A Public access is granted
  • B Access is denied to all
  • C Only admins retain access
  • D Specific users gain access
Explanation Setting a deny policy restricts access to all users, while the other options mistakenly imply that some access might still exist.
Q94

Which AWS service provides real-time data streaming capabilities?

  • A Amazon Kinesis
  • B AWS Data Pipeline
  • C Amazon S3
  • D AWS Glue
Explanation Amazon Kinesis is specifically designed for real-time data streaming, while the others serve different functions.
Q95

A company needs to ensure their data is encrypted at rest and in transit. Which AWS service should they implement?

  • A Amazon EC2
  • B AWS Key Management Service
  • C Amazon RDS
  • D Amazon CloudWatch
Explanation AWS Key Management Service provides key management for encryption both at rest and in transit.
Q96

You are configuring an AWS Lambda function triggered by an S3 bucket. What happens if the Lambda function fails?

  • A It retries automatically unlimited times
  • B It logs the error only
  • C It discards the event
  • D It can send notifications on failure
Explanation Configuring a dead-letter queue allows error handling via notifications, while others do not appropriately manage failures.
Q97

Which AWS service is best for running serverless applications?

  • A AWS Lambda
  • B Amazon EC2
  • C Amazon RDS
  • D Amazon S3
Explanation AWS Lambda lets you run code without provisioning servers, unlike the other options which require server management.
Q98

A company needs to analyze vast amounts of clickstream data in real time. Which AWS service should they use?

  • A Amazon QuickSight
  • B Amazon Kinesis
  • C AWS Glue
  • D Amazon Athena
Explanation Amazon Kinesis is designed for real-time data streaming compared to the other services focusing on batch processing or analytics.
Q99

What happens when an IAM user tries to access a resource without appropriate permissions?

  • A Access is granted automatically
  • B User receives a permission error
  • C AWS routes request to admin
  • D Access is granted via temporary credentials
Explanation The user receives a permission error indicating insufficient access rights, differing from the others implying granting access or hasty resolutions.
Q100

Which service allows you to simplify managing encryption keys?

  • A AWS Key Management Service
  • B AWS Identity and Access Management
  • C AWS CloudTrail
  • D AWS Simple Notification Service
Explanation AWS Key Management Service simplifies key management, while the others focus on access control or logging.