Free Amazon AWS-DEA-C01 Exam Questions

Question 1

A healthcare organization stores patient records from multiple regions in an Amazon S3 bucket, which is used for regional health analysis. A data compliance team needs to ensure that health analysts can only access patient records from their specific region to comply with local privacy regulations.

Which solution will enable this requirement with the minimum amount of operational effort?

A : Import the data into an Amazon Aurora database, set up regional schemas, and create IAM policies that grant access to these schemas based on the analyst's region.

B : Implement AWS Lake Formation, register the S3 bucket as a data lake, and utilize Lake Formation's fine-grained access control to manage region-specific data access.

C : Distribute the data across multiple AWS Regions correlating to the patient locations, and implement IAM policies to grant data access to analysts within the same geographical region.

D : Segment the patient records into different S3 prefixes per region, and use IAM bucket policies to restrict access to analysts based on their regional assignment.

Answer: B

Question 2

A company wants to migrate a data warehouse from Teradata to Amazon Redshift. Which solution will meet this requirement with the LEAST operational effort?

A : Use AWS Database Migration Service (AWS DMS) Schema Conversion to migrate the schema. Use AWS DMS to migrate the data.

B : Use the AWS Schema Conversion Tool (AWS SCT) to migrate the schema. Use AWS Database Migration Service (AWS DMS) to migrate the data.

C : Use AWS Database Migration Service (AWS DMS) to migrate the data. Use automatic schema conversion.

D : Manually export the schema definition from Teradata. Apply the schema to the Amazon Redshift database. Use AWS Database Migration Service (AWS DMS) to migrate the data.

Answer: B

Question 3

A telecommunications company collects network usage data throughout each day at a rate of several thousanddata points each second. The company runs an application to process the usage data in real time. Thecompany aggregates and stores the data in an Amazon Aurora DB instance.Sudden drops in network usage usually indicate a network outage. The company must be able to identifysudden drops in network usage so the company can take immediate remedial actions.Which solution will meet this requirement with the LEAST latency?

A : Create an AWS Lambda function to query Aurora for drops in network usage. Use Amazon EventBridge to automatically invoke the Lambda function every minute.

B : Modify the processing application to publish the data to an Amazon Kinesis data stream. Create an Amazon Managed Service for Apache Flink (previously known as Amazon Kinesis Data Analytics) application to detect drops in network usage.

C : Replace the Aurora database with an Amazon DynamoDB table. Create an AWS Lambda function to query the DynamoDB table for drops in network usage every minute. Use DynamoDB Accelerator (DAX) between the processing application and DynamoDB table.

D : Create an AWS Lambda function within the Database Activity Streams feature of Aurora to detect drops in network usage.

Answer: B

Question 4

A company needs to partition the Amazon S3 storage that the company uses for a data lake. The partitioning will use a path of the S3 object keys in the following format:

s3://bucket/prefix/year=2023/month=01/day=01

A data engineer must ensure that the AWS Glue Data Catalog synchronizes with the S3 storage when the company adds new partitions to the bucket.

Which solution will meet these requirements with the LEAST latency?

A : Manually run the AWS Glue CreatePartition API twice each day.

B : Run the MSCK REPAIR TABLE command from the AWS Glue console.

C : Schedule an AWS Glue crawler to run every morning.

D : Use code that writes data to Amazon S3 to invoke the Boto3 AWS Glue create_partition API call.

Answer: B

Question 5

A company stores its processed data in an S3 bucket. The company has a strict data access policy. Thecompany uses IAM roles to grant teams within the company different levels of access to the S3 bucket.The company wants to receive notifications when a user violates the data access policy. Each notificationmust include the username of the user who violated the policy.Which solution will meet these requirements?

A : Use AWS Config rules to detect violations of the data access policy. Set up compliance alarms.

B : Use Amazon CloudWatch metrics to gather object-level metrics. Set up CloudWatch alarms.

C : Use AWS CloudTrail to track object-level events for the S3 bucket. Forward events to Amazon CloudWatch to set up CloudWatch alarms.

D : Use Amazon S3 server access logs to monitor access to the bucket. Forward the access logs to an Amazon CloudWatch log group. Use metric filters on the log group to set up CloudWatch alarms.

Answer: C