Question 1

A data engineer at a financial analysis firm is responsible for enriching their AWS-based data lake with external financial datasets. The firm requires regular updates of stock market data and economic indicators from various data providers, which should be integrated seamlessly into their Amazon S3-based data lake for further processing and analysis.

Which AWS service should the data engineer use to automate the ingestion of these external financial datasets into their data lake with minimal effort?

Options :

A : Implement an AWS Glue crawler to extract data from external data sources and load it into the data lake.

B : Configure Amazon AppFlow to create flows between the data providers and S3, syncing the financial datasets to the data lake.

C : Set up a recurring AWS Lambda function to retrieve and upload data from third-party APIs to their S3 data lake.

D : Use AWS Data Exchange to subscribe to relevant financial datasets and directly import them into their S3 data lake.

Answer: D

Question 2

A company has a production AWS account that runs company workloads. The company's security team

created a security AWS account to store and analyze security logs from the production AWS account. The

security logs in the production AWS account are stored in Amazon CloudWatch Logs.

The company needs to use Amazon Kinesis Data Streams to deliver the security logs to the security AWS

account.

Which solution will meet these requirements?

Options :

A :

Create a destination data stream in the production AWS account. In the security AWS account, create an IAM role that has cross-account permissions to Kinesis Data Streams in the production AWS account.

B :

Create a destination data stream in the security AWS account. Create an IAM role and a trust policy to grant CloudWatch Logs the permission to put data into the stream. Create a subscription filter in the security AWS account.

C :

Create a destination data stream in the production AWS account. In the production AWS account, create an IAM role that has cross-account permissions to Kinesis Data Streams in the security AWS account

D :

Create a destination data stream in the security AWS account. Create an IAM role and a trust policy to grant CloudWatch Logs the permission to put data into the stream. Create a subscription filter in the production AWS account.

Answer: D

Question 3

A data engineering team is planning to use AWS Glue for their ETL jobs.

Which feature of AWS Glue should they use to simplify and automate the process of data discovery, conversion, and mapping to make the data available for analytics?

Options :

A : Glue Studio.

B : Glue Data Catalog.

C : Glue Job Bookmarks.

D : Glue Schema Registry.

Answer: B

Question 4

A mobile application development company is using Amazon DynamoDB for its user data storage. The company requires a mechanism to track and respond to changes in the user data in real-time. They need a solution that captures modifications to DynamoDB items and triggers a process to handle these changes as they occur.

Which AWS service should the company implement to meet this requirement effectively?

Options :

A : Implement Amazon Kinesis Data Firehose to capture and process data changes in DynamoDB.

B : Activate DynamoDB Streams to capture changes and trigger an AWS Lambda function for real-time processing.

C : Configure Amazon S3 event notifications to respond to data changes in the DynamoDB table.

D : Use AWS Lambda to periodically poll the DynamoDB table for changes.

Answer: B

Question 5

A company has as JSON file that contains personally identifiable information (PIT) data and non-PII data. The company needs to make the data available for querying and analysis. The non-PII data must be available to everyone in the company. The PII data must be available only to a limited group of employees. Which solution will meet these requirements with the LEAST operational overhead?

Options :

A :

Store the JSON file in an Amazon S3 bucket. Configure AWS Glue to split the file into one file that contains the PII data and one file that contains the non-PII data. Store the output files in separate S3 buckets. Grant the required access to the buckets based on the type of user.

B :

Store the JSON file in an Amazon S3 bucket. Use Amazon Macie to identify PII data and to grant access based on the type of user.

C :

Store the JSON file in an Amazon S3 bucket. Catalog the file schema in AWS Lake Formation. Use Lake Formation permissions to provide access to the required data based on the type of user.

D :

Create two Amazon RDS PostgreSQL databases. Load the PII data and the non-PII data into the separate databases. Grant access to the databases based on the type of user.

Answer: C

Confidently Practice Online with Free Data-Engineer-Associate Exam Cram

Buying Options: