AWS-CERTIFIED-DATA-ENGINEER-ASSOCIATE-DEA-C01Updated 8d ago · Aug 28, 2026

AWS Certified Data Engineer - Associate DEA-C01

366 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 36 questions are free to preview.

Browse questions Practice mode

Topics

#	Topic	Questions	Free
1	Data Operations and Support	366	36

Preview

36 of 366 accessible

Question 1 · Data Operations and Support Open

A company uses an Amazon S3 bucket to integrate multiple data sources into a centralized data lake. The company must perform multiple transformations and data-cleaning processes on the data so that the data is accessible to business partners. The company requires a solution that enables multiple business partners to run SQL queries on the centralized data lake during normal business hours. Which solution meets these requirements **MOST** cost-effectively?

Answer: B AWS Glue Flex is appropriate for non-urgent batch transformations, such as processing the previous day’s data after business hours, and reduces ETL cost through flexible execution. Amazon Redshift Serverless automatically provides and scales query capacity, charging for the capacity used when queries run; this is more cost-effective than maintaining a provisioned Redshift cluster for a workload limited to business hours. **Learn more:** [Configuring job properties for Spark jobs in AWS Glue](https://docs.aws.amazon.com/glue/latest/dg/add-job.html) · [Billing for on-demand compute capacity - Amazon Redshift](https://docs.aws.amazon.com/redshift/latest/mgmt/serverless-billing-on-demand.html)

Question 2 · Data Operations and Support Open

A data engineer is configuring an AWS Glue job to read data from an Amazon S3 bucket. The data engineer has set up the necessary AWS Glue connection details and an associated IAM role. However, when the data engineer attempts to run the AWS Glue job, the data engineer receives an error message that indicates that there are problems with the Amazon S3 VPC gateway endpoint. The data engineer must resolve the error and connect the AWS Glue job to the S3 bucket. Which solution will meet this requirement?

Answer: D Amazon S3 gateway endpoints route S3-bound traffic from a VPC through the route tables associated with the endpoint. The route table used by the AWS Glue job must therefore contain the endpoint route so the job can reach the S3 bucket. Gateway endpoints are not network interfaces that accept inbound security-group traffic; S3 authorization and FQDN configuration do not correct a gateway-endpoint routing error. **Learn more:** [Gateway endpoints for Amazon S3](https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html) · [Gateway endpoints](https://docs.aws.amazon.com/vpc/latest/privatelink/gateway-endpoints.html)

Question 3 · Data Security and Governance Open

A retail company has a customer data hub in an Amazon S3 bucket. Employees from many countries use the data hub to support company-wide analytics. A governance team must ensure that the company's data analysts can access data only for customers who are within the same country as the analysts. Which solution will meet these requirements with the LEAST operational effort?

Answer: B AWS Lake Formation provides centralized governance for data stored in Amazon S3 and supports data filters that enforce row-level security on catalog tables. A filter based on the customer-country field can be granted to each analyst or analyst role, so each principal sees only rows for its permitted country without duplicating data or maintaining separate tables or Redshift views. **Learn more:** [Data filtering and cell-level security in Lake Formation](https://docs.aws.amazon.com/lake-formation/latest/dg/data-filtering.html) · [Securing data lakes with row-level access control](https://docs.aws.amazon.com/lake-formation/latest/dg/cbac-tutorial.html)