Amazon AWS

AWS Certified Data Engineer – Associate

DEA-C01

The AWS Certified Data Engineer – Associate (DEA-C01) exam validates your skills in data engineering on AWS. It is suitable for those who want to demonstrate their ability to design and implement data solutions.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 191–200 of 498

Q191

A company needs to securely manage SSL/TLS certificates. Which service should they use?

  • A AWS Secrets Manager
  • B AWS Certificate Manager
  • C Amazon CloudFront
  • D AWS Config
Explanation AWS Certificate Manager specializes in managing SSL/TLS certificates, while the others serve different purposes.
Q192

What happens when an IAM policy denies all actions on S3 but an attached role allows them?

  • A All actions are allowed
  • B All actions are denied
  • C Access depends on S3 settings
  • D Only list actions allowed
Explanation Deny policies take precedence over allow policies, thus access remains denied.
Q193

Which service can analyze large datasets in real-time?

  • A Amazon Kinesis
  • B AWS Glue
  • C Amazon S3
  • D AWS Lambda
Explanation Amazon Kinesis enables real-time data streaming and analysis, while the other options serve different purposes.
Q194

A company needs to store data in a durable and scalable manner. What is the best storage solution?

  • A Amazon EBS
  • B Amazon S3
  • C Amazon RDS
  • D AWS Snowball
Explanation Amazon S3 is highly durable and scalable for object storage, unlike the others that serve different storage types.
Q195

What happens when a CloudFormation stack fails to create resources?

  • A CloudFormation automatically retries the operation.
  • B The stack is deleted automatically.
  • C Resources created are kept but incomplete.
  • D Rollback to the last known stable state.
Explanation CloudFormation rolls back to the last stable state to maintain resource integrity, whereas the other options describe incorrect behaviors.
Q196

Which service is best for real-time data analytics?

  • A Amazon Kinesis
  • B Amazon S3
  • C AWS Lambda
  • D Amazon RDS
Explanation Amazon Kinesis is designed for real-time data streaming, while the others serve different purposes.
Q197

A company needs to transfer large files between AWS and on-premises data centers securely. Which service should they use?

  • A AWS Snowball
  • B AWS Direct Connect
  • C Amazon S3 Transfer Acceleration
  • D Amazon VPC Peering
Explanation AWS Direct Connect provides a dedicated connection, while others are not ideal for secure large file transfers.
Q198

You are configuring an AWS Glue job; what happens if you set the job execution timeout to a low value?

  • A Job runs indefinitely
  • B Job fails immediately
  • C Job runs until completion
  • D Job is canceled if it exceeds
Explanation Setting a timeout means the job will cancel after the specified duration; the other options misinterpret job execution behaviors.
Q199

A company needs to process real-time streaming data. Which service should they use?

  • A Amazon Kinesis
  • B Amazon S3
  • C AWS Lambda
  • D Amazon RDS
Explanation Amazon Kinesis is designed for real-time streaming data, while the others are for storage or static data processing.
Q200

You are configuring a VPC. What happens if you do not attach an Internet Gateway?

  • A Instances cannot access the Internet
  • B Instances receive a public IP
  • C VPC loses its Elastic IP
  • D Auto Scaling does not function
Explanation Without an Internet Gateway, instances in the VPC cannot communicate with the Internet.