DEA-C01PRACTICE QUESTIONS

DEA-C01 practice questions with answers

4 example questions from the AWS Certified Data Engineer - Associate question bank, grouped by exam domain. Pick an answer and check it to see the explanation.

Data Ingestion and Transformation

Question 1Select 1

null Perform data ingestion

A company uses Amazon EventBridge Scheduler to start an AWS Glue ingestion job every night. Occasionally, the StartJobRun API request fails because of transient throttling, so the job never starts. The company wants failed delivery attempts to be retried for up to 1 hour and any request that remains undelivered to be retained in an Amazon SQS queue for investigation. The solution must not require custom code. An existing Scheduler execution role trusts scheduler.amazonaws.com and has permission to start the job and send messages to the queue. Which solution meets these requirements?

A. Keep the Glue StartJobRun target. Configure the schedule's retry policy with a maximum event age of 3,600 seconds and 185 retry attempts. Configure the SQS queue as the schedule's dead-letter queue.

B. Keep the Glue StartJobRun target and configure its retry policy for a maximum event age of 3,600 seconds and 185 retry attempts. Create an EventBridge event-bus rule that matches failed Scheduler deliveries and sends them to the SQS queue instead of configuring a Scheduler dead-letter queue.

C. Replace the Glue StartJobRun target with the SQS queue. Configure a 3,600-second message retention period and set the queue's redrive policy to allow 185 receives before moving a message to a dead-letter queue.

D. Keep the Glue StartJobRun target and disable Scheduler retries. Set the Glue job's maximum retries to 3, and create an EventBridge rule that sends Glue FAILED job-state events to the SQS queue.

Data Store Management

Question 1Select 1

null Manage the lifecycle of data

A company stores temporary job-status records in an Amazon DynamoDB table with tenantId as the partition key and jobId as the sort key. Each record must expire 24 hours after creation. After expiration, records must become eligible for automatic deletion without scheduled cleanup jobs. Physical deletion can be delayed, but the application's Query requests must not return expired records. Which solution meets these requirements?

A. Store expiresAt as a String containing a fixed-format UTC ISO 8601 expiration timestamp. Enable TTL on expiresAt, and add a Query filter expression that requires expiresAt to be greater than the current timestamp in the same format.

B. Store expiresAt as a Number containing the expiration time in Unix epoch seconds. Enable TTL on expiresAt, and use strongly consistent Query requests without an expiration filter.

C. Store expiresAt as a Number containing the expiration time in Unix epoch milliseconds. Enable TTL on expiresAt, and add a Query filter expression that requires expiresAt to be greater than the current Unix epoch time in milliseconds.

D. Store expiresAt as a Number containing the expiration time in Unix epoch seconds. Enable TTL on expiresAt, and add a Query filter expression that requires expiresAt to be greater than the current Unix epoch time in seconds.

Data Operations and Support

Question 1Select 1

null Automate data processing by using AWS services

A company exposes reference datasets through an Amazon API Gateway REST API. An AWS Lambda function must retrieve data by calling GET /datasets/daily in the API's prod stage. The method uses AWS_IAM authorization, and API keys are not required. The function signs its HTTPS requests correctly by using its execution role's temporary credentials. However, requests receive an authorization error. The execution role allows apigateway:GET, which lets the function retrieve API configuration, but has no other API Gateway permissions. The function and API are in the same AWS account, and no resource policies, permissions boundaries, service control policies, or explicit denies restrict access. Which change will allow the function to retrieve the dataset while following least privilege?

A. Grant the execution role execute-api:Invoke on arn:aws:execute-api:<region>:<account-id>:<api-id>/prod/GET/datasets/daily.

B. Grant the execution role apigateway:GET on the API Gateway management resource for the GET method of /datasets/daily.

C. Add a resource-based policy to the calling Lambda function that allows the apigateway.amazonaws.com service principal to invoke it.

D. Create an API key, associate it with a usage plan for the prod stage, and have the function include the key in the x-api-key header.

Data Security and Governance

Question 1Select 1

null Apply authorization mechanisms

A company uses Amazon Athena to query an employee table in the AWS Glue Data Catalog. The table's Amazon S3 location is registered with AWS Lake Formation. An analyst IAM role currently has Lake Formation SELECT permission on the entire table and all required IAM permissions to run Athena queries. The role has no direct read access to the source S3 objects, and no other Lake Formation grants apply to the role. A new security requirement allows analysts to query all columns except salary and national_id. Analysts must continue writing their own SQL against the existing table, without creating views or copying data. Which change will enforce this requirement with the least privilege?

A. Revoke the existing table-level SELECT permission. Grant the analyst role Lake Formation SELECT permission on only the columns other than salary and national_id.

B. Revoke the existing table-level SELECT permission. Grant the analyst role Lake Formation DESCRIBE permission on the table and DATA_LOCATION_ACCESS permission on its registered S3 location.

C. Revoke the existing table-level SELECT permission. Grant the analyst role IAM permissions for s3:GetObject on the table's source objects and glue:GetTable on the catalog table.

D. Retain the existing table-level SELECT permission. Create a Lake Formation data cells filter that excludes salary and national_id, and grant SELECT on that filter to the analyst role.

PRACTICE EXAMDEA-C01 exam simulator

891 questions covering every domain and task, full-length exams, explanations for every answer and a pass probability indicator.

Open the simulator →