AWS DEA-C01: AWS Certified Data Engineer - Associate

Last checked October 22, 2026 against the official AWS exam page.

1. Question 1Data Ingestion and Transformation

   A retailer streams clickstream events into Amazon Kinesis Data Streams. A Lambda consumer must write each batch to Amazon S3 in near real time, with no servers to manage. Which delivery option is the simplest fit?

   1. AAWS Glue crawler configured on the Kinesis data stream to infer schema
   2. BAmazon Athena CTAS query that writes new records to S3 every minute
   3. CAmazon Data Firehose delivery stream with an S3 destination
   4. DAmazon EMR cluster with a permanent Spark job on the event stream
   Show answer and explanationHide answer

   Correct answer: C

   Amazon Data Firehose can read from a Kinesis data stream and deliver to S3 with buffering and no servers to manage. Athena runs queries rather than ingesting streams, and a crawler only catalogs existing data.

2. Question 2Data Store Management

   A data lake on S3 is queried by Athena, Redshift Spectrum and EMR. Analysts need a single place to define table schemas and partitions that all three engines share. Which service should the team use?

   1. AAWS Systems Manager Parameter Store
   2. BAWS Glue Data Catalog
   3. CAmazon ElastiCache for Redis
   4. DAmazon RDS parameter groups
   Show answer and explanationHide answer

   Correct answer: B

   The Glue Data Catalog is a shared Hive-compatible metadata store used by Athena, Redshift Spectrum and EMR. RDS parameter groups, ElastiCache and Parameter Store do not hold table metadata for these engines.

3. Question 3Data Operations and Support

   A nightly Glue job fails intermittently. The on-call engineer needs a central place to view job logs, metrics such as duration and failures, and to alert when the job fails. Which combination provides this?

   1. AManually reading the Glue console job run history once a week and checking the email inbox
   2. BDisabling Glue job logging and CloudWatch metric publishing to save log storage cost
   3. CCopying logs to a text file on a local workstation by hand over a VPN and then emailing it to a peer nightly
   4. DCloudWatch Logs and metrics with a CloudWatch alarm on the job failure metric and an SNS notification
   Show answer and explanationHide answer

   Correct answer: D

   Glue writes logs and metrics to CloudWatch, and an alarm on failure metrics can notify through SNS. Manual checks and disabling logs delay detection and remove the evidence needed for troubleshooting.

4. Question 4Data Security and Governance

   A team stores personal data in S3 and must find any objects that contain email addresses or credit card numbers and report them. Which service should it use?

   1. AAmazon Inspector
   2. BAmazon Macie
   3. CAWS Shield Advanced
   4. DAmazon GuardDuty
   Show answer and explanationHide answer

   Correct answer: B

   Amazon Macie uses machine learning and pattern matching to discover sensitive data such as personal identifiers in S3. Inspector scans workloads for vulnerabilities, Shield protects against DDoS, and GuardDuty detects threats from activity logs.

5. Question 5Data Ingestion and Transformation

   A data engineer needs to move 40 TB of historical data from an on-premises NFS server into Amazon S3 over a network link that is shared with production traffic. Which service is designed for this bulk transfer with scheduling and bandwidth control?

   1. AAmazon Kinesis Video Streams
   2. BAWS Snowcone with no agent
   3. CAWS DataSync
   4. DAmazon Route 53 Resolver
   Show answer and explanationHide answer

   Correct answer: C

   AWS DataSync transfers files between on-premises NFS or SMB storage and S3, with scheduling, bandwidth limits and data validation. Kinesis Video Streams is for media streams, and Route 53 Resolver handles DNS queries.