DEA-C01 Data Operations and Support Practice Question
Network Topology
Refer to the exhibit. A data engineer is troubleshooting an AWS Lambda function that processes data from Amazon S3. The function is triggered by S3 events, but no logs appear in CloudWatch Logs. The engineer runs the AWS CLI command shown. What is the MOST likely reason for the missing logs?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The Lambda execution role does not have permissions to create log groups and write logs.
The CLI command output shows the log group exists but `storedBytes: 0`, meaning no logs have been written. The most common cause is that the Lambda execution role lacks the required permissions (`logs:CreateLogStream`, `logs:PutLogEvents`). Option B is incorrect because even if the function logged to a different group, logs for this group would still be written if permissions allowed. Option C is incorrect because the function could be invoked but unable to write logs. Option D is incorrect because a retention policy does not prevent logs from being written; it only determines how long they are kept.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The Lambda execution role does not have permissions to create log groups and write logs.
Why this is correct
Missing logs:CreateLogGroup, logs:CreateLogStream, logs:PutLogEvents.
- ✗
The Lambda function is configured to log to a different log group.
Why it's wrong here
The CLI shows the log group with the expected name.
- ✗
The Lambda function is not being invoked by S3 events.
Why it's wrong here
If not invoked, no log group would exist; but group exists.
- ✗
The log retention policy is set to 7 days, causing logs to expire immediately.
Why it's wrong here
Retention does not prevent writing.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every DEA-C01 question from scratch — 1,711 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DEA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C01 exam.