Amazon AWS

AWS Certified Data Engineer – Associate

DEA-C01

The AWS Certified Data Engineer – Associate (DEA-C01) exam validates your skills in data engineering on AWS. It is suitable for those who want to demonstrate their ability to design and implement data solutions.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 431–440 of 498

Q431

A company needs to securely manage access to its AWS resources. Which service should it use?

  • A AWS IAM
  • B AWS CloudTrail
  • C AWS CloudFormation
  • D AWS Inspector
Explanation AWS IAM is specifically designed for access management, whereas others serve different purposes.
Q432

You are configuring an Amazon RDS instance with Multi-AZ deployment. What happens during a failover?

  • A No downtime occurs for users
  • B The primary instance is deleted
  • C Users must reconnect manually
  • D A standby instance becomes primary
Explanation In a Multi-AZ deployment, a standby instance automatically takes over as primary during a failover.
Q433

Which service provides managed Hadoop framework on AWS?

  • A Amazon EMR
  • B AWS Glue
  • C Amazon Redshift
  • D AWS Batch
Explanation Amazon EMR is specifically designed for running Hadoop frameworks, while the others serve different purposes.
Q434

A company needs to encrypt data at rest in S3. What service should they use?

  • A AWS Lambda
  • B S3 Server-Side Encryption
  • C AWS Shield
  • D Amazon CloudFront
Explanation S3 Server-Side Encryption is meant for data at rest, while others do not directly encrypt S3 data.
Q435

You are configuring IAM roles for an application. What happens when a user has two conflicting policies?

  • A Access granted by most permissive
  • B Access denied unless explicitly allowed
  • C Access denied by default
  • D Only admin can resolve conflicts
Explanation IAM evaluates both policies and defaults to deny unless explicitly allowed.
Q436

Which AWS service can be used for real-time data ingestion?

  • A Kinesis
  • B S3
  • C RDS
  • D CloudFront
Explanation Kinesis specializes in real-time data ingestion, unlike others which serve different purposes.
Q437

A company needs to enforce least privilege access on its S3 buckets. What should it implement?

  • A Bucket Policies
  • B S3 Replication
  • C CloudFormation Templates
  • D CloudTrail Logging
Explanation Bucket Policies are essential for defining access control and enforcing least privilege, while the others do not serve this function directly.
Q438

You are configuring Amazon Redshift for a data warehousing solution. What happens if you set the `WLM` to a fixed queue?

  • A Increases concurrency limits
  • B Decreases query execution time
  • C Limits query concurrency levels
  • D Enables automatic resource scaling
Explanation Fixed queues in WLM limit how many queries can run concurrently, impacting performance if limits are reached.
Q439

Which service is used for serverless compute in AWS?

  • A AWS Lambda
  • B Amazon EC2
  • C Amazon S3
  • D AWS Batch
Explanation AWS Lambda allows you to run code without provisioning servers, while the others are not serverless compute services.
Q440

A company wants to analyze log data in real-time. Which AWS service should they use?

  • A Amazon S3
  • B Amazon Kinesis
  • C AWS Snowball
  • D AWS Glue
Explanation Amazon Kinesis is ideal for real-time processing of streaming data, while the others do not focus on real-time analysis.