The AWS Certified Data Engineer – Associate (DEA-C01) exam validates your skills in data engineering on AWS. It is suitable for those who want to demonstrate their ability to design and implement data solutions.
A company needs to ensure their S3 buckets are not publicly accessible. What should they configure?
ABucket Policy
BACLs
CLifecycle Rules
DReplication Rules
Explanation
A Bucket Policy is necessary to enforce access controls, while ACLs are less effective for overall management.
Q12
You are configuring DynamoDB. What happens if you exceed your read capacity units?
ARequest fails immediately
BYou are billed extra
CThrottling occurs
DData is automatically archived
Explanation
Throttling occurs to manage excess requests, while the others do not correctly describe the behavior.
Q13
Which service provides managed container orchestration?
AAmazon ECS
BAWS Lambda
CAmazon SQS
DAmazon DynamoDB
Explanation
Amazon ECS is specifically designed for container orchestration, unlike the other options.
Q14
A company needs to securely share data across accounts. Which service should they use?
AAWS Data Pipeline
BAWS Glue
CAmazon S3 with Bucket Policy
DAWS CodeCommit
Explanation
Amazon S3 with Bucket Policy allows secure cross-account data sharing effectively.
Q15
What happens when an IAM policy grants more permissions than intended?
APermissions get automatically refined.
BLeast privilege principle is violated.
CUser cannot access any resources.
DNo impact on account access.
Explanation
Granting too many permissions violates the least privilege principle, a key security concept.
Q16
Which service provides real-time processing of streaming data?
AAWS Lambda
BAmazon Kinesis
CAmazon S3
DAmazon RDS
Explanation
Amazon Kinesis is specifically designed for processing streaming data in real-time, while the others do not provide this feature.
Q17
A company needs low-latency access to its frequently accessed records. Which database option should it choose?
AAmazon DynamoDB
BAmazon S3
CAmazon RDS
DAmazon Redshift
Explanation
Amazon DynamoDB is a NoSQL database built for low-latency access, unlike the others which are not exclusively focused on performance for frequent access.
Q18
You are configuring an S3 bucket policy. What happens if you set 's3:PutObject' to deny?
AUpload permission is granted.
BAll users can upload.
CUploads are blocked.
DOnly admins can upload.
Explanation
Setting 's3:PutObject' to deny blocks all upload attempts regardless of the user, unlike the other options which suggest permissions might still exist.
Q19
Which AWS service allows for event-driven serverless architectures?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS Elastic Beanstalk
Explanation
AWS Lambda runs code in response to events; others require a server or instance.
Q20
A company needs to store sensitive customer data in a way that adheres to strict compliance regulations. Which encryption method is most appropriate?
AClient-side encryption
BServer-side encryption with S3
CApplication-level encryption
DDatabase encryption only
Explanation
Server-side encryption provides easier key management and compliance; client-side relies on users to encrypt data.