Question 1

A Data Engineering Team at an e-commerce company needs to regularly purge customer data from an Amazon RDS instance to comply with privacy regulations. The data to be deleted is determined based on a set of complex business rules which involve query results from multiple tables.

Additionally, the team must ensure that the deletion process is logged for audit purposes and that the database's performance is not significantly impacted during peak business hours.

Which approach should the team take to meet these requirements most effectively?

Options :

A : Implement an AWS Lambda function that is triggered daily during off-peak hours. The Lambda function executes the deletion commands based on the business rules and writes the deletion logs to Amazon CloudWatch. Use Amazon RDS Read Replicas to ensure the main database-s performance is not affected.

B : Schedule an AWS Data Pipeline job to extract the relevant records to an Amazon S3 bucket, where another job will delete the records. Use Amazon CloudTrail to log all operations. Amazon RDS-s performance is managed by AWS Data Pipeline-s resource allocation.

C : Create an Amazon RDS Event Subscription to notify an AWS Lambda function when it-s time to delete data. The Lambda function processes the deletion in batches to minimize the performance impact and logs actions to a dedicated Amazon DynamoDB table for auditing.

D : Develop a custom script that runs on an Amazon EC2 instance to perform the deletions during off-peak hours. The script logs all operations in Amazon S3 and uses RDS-s native functionality to manage database load during execution.

Answer: A

Question 2

A healthcare application hosted on AWS uses Amazon EC2 instances to manage sensitive patient data that must comply with regulatory security standards. The data is stored on EBS volumes attached to the EC2 instances. The company's security policy mandates that all data at rest be encrypted to protect against unauthorized access.

Which action should the IT department take to secure the EBS volumes in accordance with the company's security policy?

Options :

A : Use AWS Certificate Manager to apply SSL/TLS certificates to the EBS volumes.

B : Encrypt the EBS volumes with Amazon S3 server-side encryption.

C : Enable EBS encryption with AWS Key Management Service (KMS) keys.

D : Run a third-party encryption tool to encrypt data on the EBS volumes before storage.

Answer: C

Question 3

A data engineering team is planning to use AWS Glue for their ETL jobs.

Which feature of AWS Glue should they use to simplify and automate the process of data discovery, conversion, and mapping to make the data available for analytics?

Options :

A : Glue Studio.

B : Glue Data Catalog.

C : Glue Job Bookmarks.

D : Glue Schema Registry.

Answer: B

Question 4

In an effort to optimize their online gaming platform's performance, a Cloud Data Engineer decides to analyze the application's debug logs. These logs are generated by various game servers and automatically streamed to CloudWatch Logs. The engineer needs a quick and efficient way to perform exploratory analysis on these logs to identify any recurrent patterns or anomalies indicative of performance issues.

Which AWS service or feature should the engineer leverage for this task?

Options :

A : Employ Amazon OpenSearch Service for real-time analysis of the logs directly from CloudWatch.

B : Utilize CloudWatch Logs Insights for executing queries against the log data and gaining immediate insights.

C : Use AWS Lambda to process and transfer the logs from CloudWatch to Amazon S3, and then analyze them using Amazon Athena.

D : Set up an Amazon EMR cluster with Hadoop to import logs from CloudWatch and conduct a detailed analysis.

Answer: B

Question 5

A company stores sensitive documents in an Amazon S3 bucket. They need to ensure that these documents can only be accessed by requests originating from a specific range of IP addresses within their corporate network. The company wants to enforce this policy at the bucket level.

Which approach should the company use to restrict access to the S3 bucket based on the originating IP address?

Options :

A : Apply an S3 bucket policy that includes a condition to allow access only from the specified IP address range.

B : Implement IAM user policies to restrict access to the S3 bucket based on the IP address.

C : Set up a Security Group attached to the S3 bucket to allow traffic only from the specified IP range.

D : Use a Network Access Control List (NACL) to restrict access to the S3 bucket for the specific IP range.

Answer: A

Higher Test Marks with Free Online Data-Engineer-Associate Exam Practice

Buying Options: