CertBlaze

Amazon

DEA-C01 Free Practice Questions — Page 10

Question 50

A company uses AWS Key Management Service (AWS KMS) to encrypt an Amazon Redshift cluster. The company wants to configure a cross-Region snapshot of the Redshift cluster as part of disaster recovery (DR) strategy. A data engineer needs to use the AWS CLI to create the cross-Region snapshot. Which combination of steps will meet these requirements? (Choose two.)

A. Create a KMS key and configure a snapshot copy grant in the source AWS Region.
B. In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the destination AWS Region.
C. In the source AWS Region, enable snapshot copying. Specify the name of the snapshot copy grant that is created in the source AWS Region.
D. Create a KMS key and configure a snapshot copy grant in the destination AWS Region.
E. Convert the cluster to a Multi-AZ deployment.
Show Answer
Correct Answer: A, C
Explanation:
For Amazon Redshift encrypted with AWS KMS, cross-Region snapshot copy requires a snapshot copy grant that allows Redshift to use the KMS key to re-encrypt snapshots during the copy process. This snapshot copy grant is created in the source Region where the cluster and KMS key reside. After the grant is created, snapshot copying is enabled on the source cluster and the name of that source-Region snapshot copy grant is specified. A separate KMS key or snapshot copy grant does not need to be created in the destination Region, and Multi-AZ is unrelated to Redshift snapshot copy.

Question 51

A company has an application that uses an Amazon API Gateway REST API and an AWS Lambda function to retrieve data from an Amazon DynamoDB instance. Users recently reported intermittent high latency in the application's response times. A data engineer finds that the Lambda function experiences frequent throttling when the company's other Lambda functions experience increased invocations. The company wants to ensure the API's Lambda function operate without being affected by other Lambda functions. Which solution will meet this requirement MOST cost-effectively?

A. Increase the number of read capacity unit (RCU) in DynamoDB.
B. Configure provisioned concurrency for the Lambda function.
C. Configure reserved concurrency for the Lambda function.
D. Increase the Lambda function timeout and allocated memory.
Show Answer
Correct Answer: C
Explanation:
The issue is Lambda throttling caused by account-level concurrency being consumed by other functions. Reserved concurrency guarantees a fixed number of concurrent executions for this specific Lambda function and isolates it from other functions, preventing throttling. This directly addresses the problem at no additional runtime cost beyond configuration. Provisioned concurrency addresses cold starts, not contention, and adds cost. DynamoDB RCUs and Lambda memory/timeout do not resolve Lambda concurrency throttling.

Question 52

A company has a data processing pipeline that includes several dozen steps. The data processing pipeline needs to send alerts in real time when a step fails or succeeds. The data processing pipeline uses a combination of Amazon S3 buckets, AWS Lambda functions, and AWS Step Functions state machines. A data engineer needs to create a solution to monitor the entire pipeline. Which solution will meet these requirements?

A. Configure the Step Functions state machines to store notifications in an Amazon S3 bucket when the state machines finish running. Enable S3 event notifications on the S3 bucket.
B. Configure the AWS Lambda functions to store notifications in an Amazon S3 bucket when the state machines finish running. Enable S3 event notifications on the S3 bucket.
C. Use AWS CloudTrail to send a message to an Amazon Simple Notification Service (Amazon SNS) topic that sends notifications when a state machine fails to run or succeeds to run.
D. Configure an Amazon EventBridge rule to react when the execution status of a state machine changes. Configure the rule to send a message to an Amazon Simple Notification Service (Amazon SNS) topic that sends notifications.
Show Answer
Correct Answer: D
Explanation:
Amazon EventBridge natively integrates with AWS Step Functions and can react in near real time to execution status changes (SUCCEEDED, FAILED, TIMED_OUT). An EventBridge rule can forward these events directly to Amazon SNS for alerting, providing end-to-end, real-time monitoring of the pipeline without custom code. The other options rely on indirect signals (S3 writes or CloudTrail) and are not designed for real-time execution state notifications.

Question 53

A data engineer uses Amazon Kinesis Data Streams to ingest and process records that contain user behavior data from an application every day. The data engineer notices that the data stream is experiencing throttling because hot shards receive much more data than other shards in the data stream. How should the data engineer resolve the throttling issue?

A. Use a random partition key to distribute the ingested records.
B. Increase the number of shards in the data stream. Distribute the records across the shards.
C. Limit the number of records that are sent each second by the producer to match the capacity of the stream.
D. Decrease the size of the records that the producer sends to match the capacity of the stream.
Show Answer
Correct Answer: A
Explanation:
The throttling is caused by hot shards, which typically occur when the partition key sends a disproportionate amount of data to a small subset of shards. The most direct and effective way to resolve this is to change the partition key strategy so records are distributed more evenly. Using a random (or higher‑cardinality) partition key spreads records across all shards and eliminates hot shards. Simply adding shards increases total capacity but does not fix uneven distribution if the same partition key continues to concentrate traffic.

Question 54

A company is designing a serverless data processing workflow in AWS Step Functions that involves multiple steps. The processing workflow ingests data from an external API, transforms the data by using multiple AWS Lambda functions, and loads the transformed data into Amazon DynamoDB. The company needs the workflow to perform specific steps based on the content of the incoming data. Which Step Functions state type should the company use to meet this requirement?

A. Parallel
B. Choice
C. Task
D. Map
Show Answer
Correct Answer: B
Explanation:
The workflow must take different execution paths based on the content of the incoming data. In AWS Step Functions, the Choice state provides conditional logic to evaluate input data and branch to specific steps accordingly. Parallel runs branches concurrently, Task performs a single unit of work, and Map iterates over a collection, none of which provide conditional decision-making.

Question 55

A company stores server logs in an Amazon S3 bucket. The company needs to keep the logs for 1 year. The logs are not required after 1 year. A data engineer needs a solution to automatically delete logs that are older than 1 year. Which solution will meet these requirements with the LEAST operational overhead?

A. Define an S3 Lifecycle configuration to delete the logs after 1 year.
B. Create an AWS Lambda function to delete the logs after 1 year.
C. Schedule a cron job on an Amazon EC2 instance to delete the logs after 1 year.
D. Configure an AWS Step Functions state machine to delete the logs after 1 year.
Show Answer
Correct Answer: A
Explanation:
Amazon S3 Lifecycle configurations can automatically expire and delete objects after a specified age. This is a fully managed, native feature that requires no custom code, servers, or workflows, resulting in the least operational overhead compared to Lambda, EC2 cron jobs, or Step Functions.

Question 56

A data engineer created a table named cloudtrail_logs in Amazon Athena to query AWS CloudTrail logs and prepare data for audits. The data engineer needs to write a query to display errors with error codes that have occurred since the beginning of 2024. The query must return the 10 most recent errors. Which query will meet these requirements?

A. select count (*) as TotalEvents, eventname, errorcode, errormessage from cloudtrail_logswhere errorcode is not nulland eventtime >= '2024-01-01T00:00:00Z' group by eventname, errorcode, errormessageorder by TotalEvents desclimit 10;
B. select count (*) as TotalEvents, eventname, errorcode, errormessage from cloudtrail_logs where eventtime >= '2024-01-01T00:00:00Z' group by eventname, errorcode, errormessage order by TotalEvents desc limit 10;
C. select count (*) as TotalEvents, eventname, errorcode, errormessage from cloudtrail_logswhere eventtime >= '2024-01-01T00:00:00Z' group by eventname, errorcode, errormessageorder by eventname asc limit 10;
D. select count (*) as TotalEvents, eventname, errorcode, errormessage from cloudtrail_logs where errorcode is not nulland eventtime >= '2024-01-01T00:00:00Z' group by eventname, errorcode, errormessagelimit 10;
Show Answer
Correct Answer: A
Explanation:
The requirement is to return only error events since the beginning of 2024 and limit the result set to 10 rows. Option A correctly filters out successful events by using `errorcode IS NOT NULL`, applies the required time filter starting at `2024-01-01T00:00:00Z`, aggregates error occurrences with `GROUP BY`, and limits the output to 10 results. The other options either do not filter for errors or do not apply an appropriate ordering.

Question 57

A company has an Amazon Redshift data warehouse that users access by using a variety of IAM roles. More than 100 users access the data warehouse every day. The company wants to control user access to the objects based on each user's job role, permissions, and how sensitive the data is. Which solution will meet these requirements?

A. Use the role-based access control (RBAC) feature of Amazon Redshift.
B. Use the row-level security (RLS) feature of Amazon Redshift.
C. Use the column-level security (CLS) feature of Amazon Redshift.
D. Use dynamic data masking policies in Amazon Redshift.
Show Answer
Correct Answer: A
Explanation:
The requirement is to control access to Amazon Redshift objects based on job role, permissions, and data sensitivity for a large number of users. Role-based access control (RBAC) is designed for exactly this use case: it allows administrators to define roles with specific privileges and assign those roles to users or IAM roles, simplifying permission management at scale. Row-level security, column-level security, and dynamic data masking address specific data filtering or masking needs but do not provide comprehensive role-based object access management. Therefore, RBAC is the correct solution.

Question 58

An online retailer uses multiple delivery partners to deliver products to customers. The delivery partners send order summaries to the retailer. The retailer stores the order summaries in Amazon S3. Some of the order summaries contain personally identifiable information (PII) about customers. A data engineer needs to detect PII in the order summaries so the company can redact the PII. Which solution will meet these requirements with the LEAST operational overhead?

A. Amazon Textract
B. Amazon S3 Storage Lens
C. Amazon Macie
D. Amazon SageMaker Data Wrangler
Show Answer
Correct Answer: C
Explanation:
Amazon Macie is a fully managed service designed to automatically discover and classify sensitive data, including PII, in Amazon S3 with minimal setup and ongoing management. It continuously scans S3 objects and reports findings, meeting the detection requirement with the least operational overhead. The other options are not purpose-built for PII discovery in S3.

Question 59

A company uses Amazon DataZone as a data governance and business catalog solution. The company stores data in an Amazon S3 data lake. The company uses AWS Glue with an AWS Glue Data Catalog. A data engineer needs to publish AWS Glue Data Quality scores to the Amazon DataZone portal. Which solution will meet this requirement?

A. Create a data quality ruleset with Data Quality Definition language (DQDL) rules that apply to a specific AWS Glue table. Schedule the ruleset to run daily. Configure the Amazon DataZone project to have an Amazon Redshift data source. Enable the data quality configuration for the data source.
B. Configure AWS Glue ETL jobs to use an Evaluate Data Quality transform. Define a data quality ruleset inside the jobs. Configure the Amazon DataZone project to have an AWS Glue data source. Enable the data quality configuration for the data source.
C. Create a data quality ruleset with Data Quality Definition language (DQDL) rules that apply to a specific AWS Glue table. Schedule the ruleset to run daily. Configure the Amazon DataZone project to have an AWS Glue data source. Enable the data quality configuration for the data source.
D. Configure AWS Glue ETL jobs to use an Evaluate Data Quality transform. Define a data quality ruleset inside the jobs. Configure the Amazon DataZone project to have an Amazon Redshift data source. Enable the data quality configuration for the data source.
Show Answer
Correct Answer: C
Explanation:
Amazon DataZone can surface AWS Glue Data Quality scores only when they are generated by AWS Glue Data Quality rulesets associated directly with AWS Glue Data Catalog tables and when the DataZone project is configured with an AWS Glue data source. Creating a DQDL ruleset on a Glue table and scheduling it publishes quality results that DataZone can ingest. Using Redshift as a data source or defining quality only inside ETL jobs does not meet the requirement for DataZone to publish Glue Data Quality scores.

$19

Get all 279 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.

Full DEA-C01 study guide →