20+ practice questions focused on Data Store Management — one of the most tested topics on the AWS Certified Data Engineer Associate DEA-C01 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Data Store Management PracticeA data engineer attaches the above IAM policy to an IAM user. The user tries to download an object from my-bucket using the AWS CLI without specifying SSE headers. The object is stored with SSE-S3. Will the download succeed?
Explanation: For SSE-S3 objects, no additional encryption headers are required on GET requests because S3 handles decryption transparently for authorized users. The IAM policy grants s3:GetObject, so the download succeeds.
A data engineer is designing a data lake on Amazon S3. The data includes customer PII that must be encrypted at rest. The company also requires that the encryption keys be rotated automatically every year. Which encryption solution should the engineer use?
Explanation: SSE-KMS with automatic key rotation enabled meets both requirements: it encrypts data at rest in S3 and allows the company to automatically rotate the customer master key (CMK) every year. AWS KMS supports automatic annual rotation for symmetric CMKs, which satisfies the compliance need without manual intervention.
A company is using Amazon Redshift for a data warehouse. The data engineer needs to improve query performance for a table that is frequently joined with other tables on a specific column. Which THREE actions would help improve join performance? (Choose THREE.)
Explanation: Setting the distribution style to KEY on the join column (option A) ensures that rows with the same join key value are co-located on the same compute node, enabling collocated joins and avoiding costly redistribution. Applying a SORTKEY on the join column (option B) allows Redshift to use merge joins efficiently and reduce the data scanned. Using DISTSTYLE ALL (option D) replicates the entire table to every node, which can eliminate the need to redistribute data for joins when the table is small or a dimension table. Options A and C are essentially the same action (DISTKEY is the same as distribution style KEY), so they are not distinct; thus the correct set is A, B, and D.
A data engineering team is designing a data lake on Amazon S3. They need to store raw data in its original format and transformed data in Parquet. The data is accessed by multiple analytics services, including Amazon Athena and Amazon Redshift Spectrum. Compliance requirements mandate that all data be encrypted at rest with AWS KMS and that the encryption keys be rotated every 90 days. Which S3 bucket configuration meets these requirements?
Explanation: SSE-KMS with a customer-managed KMS key allows you to implement custom key rotation, such as every 90 days, by creating new keys and updating the bucket policy or key alias. AWS KMS automatic key rotation for customer-managed keys occurs yearly, not every 90 days, but you can achieve a 90-day rotation schedule manually or through automation (e.g., AWS Lambda). SSE-C requires manual key management and does not integrate with AWS services like Amazon Athena. SSE-S3 does not support configurable rotation, and the default encryption option (C) does not meet compliance if rotation is required.
A data engineer is troubleshooting an AWS Glue ETL job that reads from an S3 bucket and writes to a DynamoDB table. The job fails with an AccessDeniedException. The IAM role attached to the Glue job has the policy shown in the exhibit. Which TWO additional permissions are required to resolve the issue?
Explanation: The AccessDeniedException indicates missing permissions on the resources used by the Glue job. For reading from an S3 bucket, the job requires s3:ListBucket permission to list objects (if the job uses a prefix or crawls the bucket) and s3:GetObject to read individual objects. For writing to a DynamoDB table, it requires dynamodb:PutItem (not listed). However, among the given options, the two additional permissions that are commonly missing and directly related to the failure are s3:ListBucket (D) for S3 access and kms:Decrypt (A) if either the S3 bucket or the DynamoDB table uses AWS KMS encryption. Note: The job's role already likely has some DynamoDB write permissions (like PutItem) as part of the base policy, but if the DynamoDB table uses KMS, kms:Decrypt is also necessary for the write operation.
+15 more Data Store Management questions available
Practice all Data Store Management questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Data Store Management. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Data Store Management questions on the DEA-C01 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Data Store Management is tested as part of the AWS Certified Data Engineer Associate DEA-C01 blueprint. Practicing with targeted Data Store Management questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free DEA-C01 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Data Store Management is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Data Store Management practice session with instant scoring and detailed explanations.
Start Data Store Management Practice →