DEA-C01 AWS Certified Data Engineer – Associate Free Practice Questions and Answers

An AWS Glue job in private subnets cannot reach an S3 bucket. The VPC already has an S3 gateway endpoint, and the job role has S3 permissions. What should the engineer check first?

• A. Whether the endpoint is associated with the job subnets’ route tables and its policy permits the bucket
• B. Whether the VPC has an internet gateway attached to every private subnet
• C. Whether an S3 bucket has an EC2 security group
• D. Whether the Glue job uses a public IP address

Analysts share a customer data lake, but each analyst should see records only for customers in the analyst’s country. The team wants centralized governance with minimal separate datasets. What should it use?

• A. AWS Lake Formation fine-grained row-level permissions
• B. A separate full copy of every table for every analyst
• C. Public S3 URLs with country names in the object key
• D. An IAM policy that grants every analyst access to all rows

A media company wants to incorporate licensed third-party datasets into its analytics environment with minimal integration effort. Which AWS service can help discover and subscribe to those datasets?

• A. AWS Data Exchange
• B. AWS DataSync
• C. Amazon CloudFront
• D. AWS Config

A data mesh requires centralized governance, S3-based storage, and serverless SQL analysis. Which combination best fits?

• A. Amazon S3, AWS Glue Data Catalog, AWS Lake Formation, and Amazon Athena
• B. Amazon EC2 instance store, Route 53, and CloudFront
• C. Amazon EBS volumes, AWS Shield, and AWS Budgets
• D. Amazon RDS snapshots and AWS CloudTrail only

Many Lambda functions use the same custom Python formatting code. The team wants to update the shared code once rather than editing every function. What should it package?

• A. A Lambda layer
• B. A separate copy in each function zip file
• C. A CloudTrail event selector
• D. A VPC endpoint policy