A retail company stores customer data in an Amazon S3 bucket. Some of the customer data contains personally identifiable information (PII) about customers. The company must not share PII data with business partners.
A data engineer must determine whether a dataset contains PII before making objects in the dataset available to business partners.
Which solution will meet this requirement with the LEAST manual intervention?
A. Configure the S3 bucket and S3 objects to allow access to Amazon Macie. Use automated sensitive data discovery in Macie.
B. Configure AWS CloudTrail to monitor S3 PUT operations. Inspect the CloudTrail trails to identify operations that save PII.
C. Create an AWS Lambda function to identify PII in S3 objects. Schedule the function to run periodically.
D. Create a table in AWS Glue Data Catalog. Write custom SQL queries to identify PII in the table. Use Amazon Athena to run the queries.
Show Answer
Correct Answer: A
Explanation: Amazon Macie provides fully managed, automated sensitive data discovery for Amazon S3. It uses machine learning and pattern matching to continuously scan objects and identify PII with minimal setup and no custom code, requiring the least manual intervention compared to building Lambda logic, querying with Athena, or inspecting CloudTrail logs.
Question 93
A data engineer wants to orchestrate a set of extract, transform, and load (ETL) jobs that run on AWS. The ETL jobs contain tasks that must run Apache Spark jobs on Amazon EMR, make API calls to Salesforce, and load data into Amazon Redshift.
The ETL jobs need to handle failures and retries automatically. The data engineer needs to use Python to orchestrate the jobs.
Which service will meet these requirements?
A. Amazon Managed Workflows for Apache Airflow (Amazon MWAA)
B. AWS Step Functions
C. AWS Glue
D. Amazon EventBridge
Show Answer
Correct Answer: A
Explanation: Amazon Managed Workflows for Apache Airflow (MWAA) is designed for Python-based orchestration using Airflow DAGs. It natively supports complex ETL workflows with task dependencies, retries, and failure handling, and can orchestrate Spark jobs on EMR, API calls to external systems like Salesforce, and loads into Amazon Redshift. While Step Functions has retry logic, its workflows are defined in JSON-based state machines rather than Python, making MWAA the best fit for the stated requirement.
Question 94
A data engineer maintains custom Python scripts that perform a data formatting process that many AWS Lambda functions use. When the data engineer needs to modify the Python scripts, the data engineer must manually update all the Lambda functions.
The data engineer requires a less manual way to update the Lambda functions.
Which solution will meet this requirement?
A. Store the custom Python scripts in a shared Amazon S3 bucket. Store a pointer to the custom scripts in the execution context object.
B. Package the custom Python scripts into Lambda layers. Apply the Lambda layers to the Lambda functions.
C. Store the custom Python scripts in a shared Amazon S3 bucket. Store a pointer to the customer scripts in environment variables.
D. Assign the same alias to each Lambda function. Call each Lambda function by specifying the function's alias.
Show Answer
Correct Answer: B
Explanation: Lambda layers are designed to share common code and dependencies across multiple Lambda functions. By packaging the custom Python scripts into a layer and attaching it to all functions, the data engineer can update the scripts in one place and then update the layer version used by the functions, eliminating the need to manually modify each function’s code.
Question 95
A company stores customer data in an Amazon S3 bucket. Multiple teams in the company want to use the customer data for downstream analysis. The company needs to ensure that the teams do not have access to personally identifiable information (PII) about the customers.
Which solution will meet this requirement with LEAST operational overhead?
A. Use Amazon Macie to create and run a sensitive data discovery job to detect and remove PII.
B. Use S3 Object Lambda to access the data, and use Amazon Comprehend to detect and remove PII.
C. Use Amazon Data Firehose and Amazon Comprehend to detect and remove PII.
D. Use an AWS Glue DataBrew job to store the PII data in a second S3 bucket. Perform analysis on the data that remains in the original S3 bucket.
Show Answer
Correct Answer: B
Explanation: The requirement is to let multiple teams analyze S3 data without exposing PII, with the least operational overhead. Amazon Macie (A) can only discover and classify PII; it does not redact or transform data for downstream access. AWS Glue DataBrew (D) and Firehose (C) require building and maintaining separate data pipelines or copies of data, which increases operational effort. S3 Object Lambda combined with Amazon Comprehend (B) allows on-the-fly detection and redaction of PII at access time without duplicating data or managing complex ETL jobs, making it the lowest-overhead solution.
Question 96
A company stores its processed data in an S3 bucket. The company has a strict data access policy. The company uses IAM roles to grant teams within the company different levels of access to the S3 bucket.
The company wants to receive notifications when a user violates the data access policy. Each notification must include the username of the user who violated the policy.
Which solution will meet these requirements?
A. Use AWS Config rules to detect violations of the data access policy. Set up compliance alarms.
B. Use Amazon CloudWatch metrics to gather object-level metrics. Set up CloudWatch alarms.
C. Use AWS CloudTrail to track object-level events for the S3 bucket. Forward events to Amazon CloudWatch to set up CloudWatch alarms.
D. Use Amazon S3 server access logs to monitor access to the bucket. Forward the access logs to an Amazon CloudWatch log group. Use metric filters on the log group to set up CloudWatch alarms.
Show Answer
Correct Answer: C
Explanation: AWS CloudTrail records S3 object-level API events (such as GetObject, PutObject, and denied requests) and includes the IAM user or role that made the request. By forwarding CloudTrail events to Amazon CloudWatch Logs, the company can create metric filters and alarms to generate notifications when access policy violations occur, with the username included in the event details. Other options either do not capture user-level access violations or are not designed for real-time policy violation alerts.
Question 97
A company needs to load customer data that comes from a third party into an Amazon Redshift data warehouse. The company stores order data and product data in the same data warehouse. The company wants to use the combined dataset to identify potential new customers.
A data engineer notices that one of the fields in the source data includes values that are in JSON format.
How should the data engineer load the JSON data into the data warehouse with the LEAST effort?
A. Use the SUPER data type to store the data in the Amazon Redshift table.
B. Use AWS Glue to flatten the JSON data and ingest it into the Amazon Redshift table.
C. Use Amazon S3 to store the JSON data. Use Amazon Athena to query the data.
D. Use an AWS Lambda function to flatten the JSON data. Store the data in Amazon S3.
Show Answer
Correct Answer: A
Explanation: Amazon Redshift supports the SUPER data type, which can store semi-structured data such as JSON directly. Using SUPER allows the data engineer to load the JSON field without flattening or preprocessing, minimizing development and operational effort. Other options introduce unnecessary transformation or querying outside Redshift.
Question 98
A company has a data lake in Amazon S3. The company collects AWS CloudTrail logs for multiple applications. The company stores the logs in the data lake, catalogs the logs in AWS Glue, and partitions the logs based on the year. The company uses Amazon Athena to analyze the logs.
Recently, customers reported that a query on one of the Athena tables did not return any data. A data engineer must resolve the issue.
Which combination of troubleshooting steps should the data engineer take? (Choose two.)
A. Confirm that Athena is pointing to the correct Amazon S3 location.
B. Increase the query timeout duration.
C. Use the MSCK REPAIR TABLE command.
D. Restart Athena.
E. Delete and recreate the problematic Athena table.
Show Answer
Correct Answer: A, C
Explanation: If an Athena query returns no data, first verify that the table is pointing to the correct Amazon S3 location where the CloudTrail logs actually reside. An incorrect or changed S3 path will result in empty query results. Additionally, because the logs are partitioned by year, Athena may not be aware of newly added partitions. Running the MSCK REPAIR TABLE command updates the Glue/Athena metadata by discovering and adding missing partitions, which commonly resolves issues where data exists in S3 but is not returned by queries.
Question 99
A data engineer configured an AWS Glue Data Catalog for data that is stored in Amazon S3 buckets. The data engineer needs to configure the Data Catalog to receive incremental updates.
The data engineer sets up event notifications for the S3 bucket and creates an Amazon Simple Queue Service (Amazon SQS) queue to receive the S3 events.
Which combination of steps should the data engineer take to meet these requirements with LEAST operational overhead? (Choose two.)
A. Create an S3 event-based AWS Glue crawler to consume events from the SQS queue.
B. Define a time-based schedule to run the AWS Glue crawler, and perform incremental updates to the Data Catalog.
C. Use an AWS Lambda function to directly update the Data Catalog based on S3 events that the SQS queue receives.
D. Manually initiate the AWS Glue crawler to perform updates to the Data Catalog when there is a change in the S3 bucket.
E. Use AWS Step Functions to orchestrate the process of updating the Data Catalog based on S3 events that the SQS queue receives.
Show Answer
Correct Answer: A, B
Explanation: The least operational overhead solution is to use managed AWS Glue crawler capabilities rather than custom code or orchestration.
Option A is required because AWS Glue supports S3 event-based crawlers that read object create events from an SQS queue. This enables incremental, event-driven updates to the Data Catalog without full re-crawls.
Option B is also required because event-based Glue crawlers still run on a schedule to poll the SQS queue for events. When events are present, the crawler processes only the changes and updates the catalog; if no events exist, it exits. This is the AWS-recommended pattern for incremental catalog updates.
Options C and E add unnecessary operational overhead by introducing custom Lambda logic or Step Functions. Option D is manual and does not meet the requirement for incremental, low-overhead updates.
Question 100
A company is building an inventory management system and an inventory reordering system to automatically reorder products. Both systems use Amazon Kinesis Data Streams. The inventory management system uses the Amazon Kinesis Producer Library (KPL) to publish data to a stream. The inventory reordering system uses the Amazon Kinesis Client Library (KCL) to consume data from the stream. The company configures the stream to scale up and down as needed.
Before the company deploys the systems to production, the company discovers that the inventory reordering system received duplicated data.
Which factors could have caused the reordering system to receive duplicated data? (Choose two.)
A. The producer experienced network-related timeouts.
B. The stream’s value for the IteratorAgeMilliseconds metric was too high.
C. There was a change in the number of shards, record processors, or both.
D. The AggregationEnabled configuration property was set to true.
E. The max_records configuration property was set to a number that was too high.
Show Answer
Correct Answer: A, C
Explanation: Amazon Kinesis provides at-least-once delivery, so duplicate records can occur. Network-related timeouts can cause the producer (KPL) to retry publishing records, resulting in duplicates. In addition, scaling events that change the number of shards or record processors can cause the KCL to reprocess records during shard rebalancing or lease transitions, also leading to duplicate consumption.
Question 101
A data engineer needs to create an empty copy of an existing table in Amazon Athena to perform data processing tasks. The existing table in Athena contains 1,000 rows.
Which query will meet this requirement?
A. CREATE TABLE new_table - LIKE old_table;
B. CREATE TABLE new_table - AS SELECT * FROM old_table - WITH NO DATA;
C. CREATE TABLE new_table - AS SELECT * FROM old_table;
D. CREATE TABLE new_table - as SELECT * FROM old_cable - WHERE 1=1;
Show Answer
Correct Answer: B
Explanation: In Amazon Athena, creating an empty copy of an existing table requires a CTAS (CREATE TABLE AS SELECT) statement with the WITH NO DATA clause. Option B uses CREATE TABLE AS SELECT with WITH NO DATA, which copies the table schema but does not copy any rows, resulting in an empty table. Option C copies all 1,000 rows, and the other options are not valid Athena SQL syntax for this requirement.
$19
Get all 279 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.