AWS-DEA-C01 Real Exam Questions and Answers FREE

Question 1

Your organization has deployed a series of IoT devices across its facilities to monitor environmental conditions. These devices send telemetry data every few seconds. As part of the data pipeline, you have been tasked with architecting a solution that ingests this streaming data, provides the ability to perform real-time analytics, and subsequently batches the data for storage in Amazon Redshift for further analysis. The solution should be scalable, manage large bursts of data effectively, and ensure that analytics can be performed promptly.

As a Cloud Data Engineering Consultant, which combination of AWS services would you employ to meet these requirements? (Select THREE)

A : Utilize Amazon DynamoDB to store and quickly retrieve data, which provides low latency access and flexibility to handle varying workloads.

B : Utilize Amazon Kinesis Data Firehose to batch and load the processed streaming data directly into Amazon Redshift.

C : Implement AWS Lambda functions to transform the data on the fly as it arrives on Kinesis Data Streams before sending it to Kinesis Data Firehose.

D : Deploy an Amazon Kinesis Data Streams application to collect streaming telematics data, enabling real-time analytics and quick response to data.

E : Configure Amazon QuickSight to connect to the Kinesis Data Stream for real-time analytics dashboards and visualizations.

F : Set up a scheduled Amazon Elastic MapReduce (EMR) job to process data, offering robust data transformation capabilities for complex analytics tasks.

Answer: B,C,D

Question 2

An organization's primary transaction processing system is powered by an Amazon RDS for PostgreSQL database. The workload is write-heavy, which is causing consistently high CPU utilization, leading to performance degradation of the system.

What measures should the data engineer implement to alleviate the CPU load on the RDS instance? (Select TWO.)

A : Enable Amazon RDS Performance Insights to analyze and identify expensive queries contributing to high CPU usage.

B : Implement Amazon ElastiCache to cache frequent queries and decrease the read load on the database.

C : Configure a read replica to offload read operations and reduce the load on the primary instance.

D : Increase the IOPS allocation for the RDS instance to handle the write-heavy workload more efficiently.

E : Scale up the RDS instance to a larger class with more CPU and memory resources.

Answer: A,E

Question 3

A Cloud Data Engineering Team is configuring access control for their company's new multi-account AWS environment. They have a centralized security account and require the ability to allow audit teams to access AWS resources across all accounts for monitoring and compliance purposes. The data engineering team needs to establish a mechanism to grant audit team members from the security account least-privilege access to the necessary resources without creating individual IAM users in each account.

Which of the following steps should the data engineering team implement to set up IAM roles effectively for this requirement? (Select TWO)

A : Enable AWS Organizations and use Service Control Policies (SCPs) to grant the audit team access to the necessary resources across all accounts within the organization.

B : Set up AWS Resource Access Manager (RAM) to share resources with the audit team members from the security account, permitting cross-account resource access without IAM roles.

C : Create cross-account IAM roles in each account with permissions policies granting the necessary access, and establish trust relationships to allow the audit team members from the security account to assume these roles.

D : Provision a dedicated IAM user for each audit team member in the security account and assign inline policies to each user that grant permissions to access resources in other accounts.

E : Implement a single IAM role in the security account with permission to assume other IAM roles in the member accounts, allowing the audit team members to switch roles as needed.

Answer: C,E

Question 4

A data engineer at a healthcare company needs to implement a solution to ensure that sensitive patient data in an Amazon S3 bucket is encrypted at rest. The company's security policy mandates the use of customer-managed keys for encryption to meet compliance requirements. The data engineer must also ensure that key usage can be audited.

Which of the following would be the MOST suitable solution?

A : Use server-side encryption with AWS KMS managed keys (SSE-KMS), create a customer managed key, and enable logging and auditing via AWS CloudTrail.

B : Encrypt data client-side using a customer-managed encryption library before uploading to S3, and utilize AWS CloudWatch for monitoring access.

C : Implement server-side encryption with AWS KMS managed keys (SSE-KMS), using an AWS managed key (default key), and track key usage through AWS Config.

D : Enable server-side encryption on the S3 bucket with Amazon S3 managed keys (SSE-S3) and use AWS CloudTrail to audit key usage.

Answer: A

Question 5

An analytics team frequently runs complex Amazon Athena queries on a dataset stored in an Amazon S3 bucket, with AWS Glue Data Catalog serving as the metadata repository. They've identified a slowdown in Athena query plans and attribute it to the excessive number of S3 partitions. The team needs to enhance query performance and reduce the time Athena takes in query planning.

Which two measures should the team take to meet these performance goals? (Select TWO.)

A : Implement AWS Glue Elastic Views to automate partition management.

B : Employ Athena's partition projection for dynamic partitioning based on common query patterns.

C : Merge small S3 objects into larger ones using AWS Glue's data transformation jobs.

D : Use Athena DML statements to reorganize data into fewer, more meaningful partitions.

E : Transform the data that is in the S3 bucket to Apache Parquet format.

Answer: B,E

Amazon AWS-DEA-C01 Exam Real Questions