Amazon AWS

AWS Certified Data Engineer – Associate

DEA-C01

The AWS Certified Data Engineer – Associate (DEA-C01) exam validates your skills in data engineering on AWS. It is suitable for those who want to demonstrate their ability to design and implement data solutions.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 411–420 of 498

Q411

You are configuring Amazon Redshift. What happens when you set an inappropriate cluster size?

  • A Cost increases without performance benefits
  • B Improves performance for all queries
  • C Performance is unaffected
  • D Data cannot be stored anymore
Explanation Setting an inappropriate cluster size can lead to higher costs without improving performance; balance is essential.
Q412

Which service is best for real-time data streaming?

  • A AWS Lambda
  • B Amazon Kinesis
  • C Amazon S3
  • D Amazon RDS
Explanation Amazon Kinesis is designed for real-time data streaming, while others focus on different functionalities.
Q413

A company needs to securely share data across multiple AWS accounts. What should they use?

  • A AWS Auto Scaling
  • B Amazon S3 Bucket Policies
  • C Amazon Route 53
  • D AWS CloudFormation
Explanation S3 Bucket Policies can define access permissions across accounts, while the others do not manage data sharing.
Q414

You are configuring an IAM policy. What happens when a policy denies access to a resource?

  • A Access is granted to the user.
  • B Access can be overridden by another policy.
  • C Access is explicitly denied.
  • D Access is granted based on permissions.
Explanation An explicit deny in IAM takes precedence over allows, completely blocking access.
Q415

Which service allows you to run code without provisioning servers?

  • A AWS Lambda
  • B Amazon EC2
  • C Amazon S3
  • D AWS Fargate
Explanation AWS Lambda executes code automatically without server management; EC2 requires server setup, S3 is for storage, and Fargate manages containers.
Q416

A company needs to analyze streaming data in real-time and wants a serverless architecture. Which AWS service is best suited for this requirement?

  • A Amazon Kinesis Data Analytics
  • B AWS Data Pipeline
  • C Amazon QuickSight
  • D AWS Glue
Explanation Amazon Kinesis Data Analytics provides real-time data processing; Data Pipeline is for batch processing, QuickSight is for visualization, and Glue is for ETL.
Q417

What happens when you set an IAM policy with explicit deny?

  • A Grant permissions to all users
  • B Deny permissions only for specific users
  • C Deny permissions regardless of allow statements
  • D Ignore the deny policy in all cases
Explanation Explicit deny overrides allow permissions; granting all users or specific denies lacks this validity, and deny policies are always enforced.
Q418

Which AWS service allows you to run code without provisioning servers?

  • A AWS Lambda
  • B EC2
  • C S3
  • D RDS
Explanation AWS Lambda lets you execute code without server management, while EC2 requires server provisioning.
Q419

A company needs to store backups cost-effectively and with infrequent access. Which S3 storage class should they choose?

  • A S3 Standard
  • B S3 Intelligent-Tiering
  • C S3 Glacier
  • D S3 One Zone-IA
Explanation S3 Glacier is designed for low-cost storage of infrequently accessed data.
Q420

What happens when you set an IAM policy with the 'Deny' effect?

  • A Permission is granted
  • B Access is explicitly denied
  • C Access is conditionally allowed
  • D Permission is defaulted to allow
Explanation An IAM policy with 'Deny' explicitly denies access, overriding any allows.