Amazon AWS

AWS Certified Data Engineer – Associate

DEA-C01

The AWS Certified Data Engineer – Associate (DEA-C01) exam validates your skills in data engineering on AWS. It is suitable for those who want to demonstrate their ability to design and implement data solutions.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 251–260 of 498

Q251

A company needs to store large amounts of infrequently accessed data, which AWS service should they use?

  • A Amazon S3 Standard
  • B Amazon S3 Intelligent-Tiering
  • C Amazon S3 Glacier
  • D Amazon EBS
Explanation Amazon S3 Glacier is specifically designed for long-term, infrequent data access at lower costs; the other options are either for frequent access or not storage services.
Q252

What happens when you delete an AWS IAM user while they are accessing a resource?

  • A User loses access immediately
  • B User remains logged in until timeout
  • C Deletion fails until user logs out
  • D All resources are deleted along with the user
Explanation The IAM user loses permissions immediately but retains their current session until it expires; deletion does not affect ongoing sessions.
Q253

Which service provides scalable block storage for EC2?

  • A Amazon EBS
  • B Amazon S3
  • C Amazon RDS
  • D Amazon Redshift
Explanation Amazon EBS is designed for EC2 instances; S3 is for objects, RDS is for databases, and Redshift is for data warehousing.
Q254

A company needs to analyze real-time streaming data. Which service should they use?

  • A Amazon Kinesis
  • B AWS Lambda
  • C Amazon S3
  • D Amazon RDS
Explanation Amazon Kinesis specializes in real-time streaming analysis; Lambda is for event-driven computation, S3 is for storage, and RDS is for relational databases.
Q255

What happens when security groups are misconfigured to allow all traffic?

  • A Infinite bandwidth allocation
  • B Increased security
  • C Vulnerable to attacks
  • D Automated instance scaling
Explanation Allowing all traffic exposes instances to security threats; infinite bandwidth is not applicable, and increased security is false.
Q256

Which service allows you to automate deployments to AWS resources?

  • A AWS CodeDeploy
  • B Amazon S3
  • C AWS Lambda
  • D Amazon EC2
Explanation AWS CodeDeploy is designed for automation of application deployments; the others do not specifically provide this functionality.
Q257

A company needs its data warehousing solution to support complex queries and analytical processing. Which AWS service should they use?

  • A AWS Glue
  • B Amazon Redshift
  • C Amazon S3
  • D AWS RDS
Explanation Amazon Redshift specializes in data warehousing and complex queries; the other options aren't optimized for this purpose.
Q258

You are configuring an IAM policy that denies access to a specific S3 bucket. What happens if another policy allows access to that bucket?

  • A Access is granted due to the allow rule.
  • B Access is denied due to explicit deny.
  • C Access is granted depending on conditions.
  • D Access can be inherited from other roles.
Explanation An explicit deny in IAM policies overrides allow rules, making access denied overall; the others misinterpret IAM policy evaluation rules.
Q259

Which service primarily helps with versioning for data stored?

  • A S3 Versioning
  • B EC2 Autoscaling
  • C EFS Performance
  • D Lambda Functions
Explanation S3 Versioning allows you to save multiple variants of an object in the same bucket, while the others do not deal with versioning.
Q260

A company needs real-time streaming data analytics. Which service should they use?

  • A AWS Batch
  • B Amazon Kinesis
  • C S3 Select
  • D AWS Glue
Explanation Amazon Kinesis is designed for real-time streaming data, while others are not specific to real-time analytics.