Courseiva
← Back to AWS Certified Data Engineer Associate DEA-C01 questions

Scenario-based practice

Refer to the Exhibit Practice Questions

Practise AWS Certified Data Engineer Associate DEA-C01 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
15
scenario questions
DEA-C01
exam code
Amazon Web Services
vendor

Scenario guide

How to approach refer to the exhibit practice questions

Practise exhibit-style questions that ask you to read a topology, table, command output or diagram before choosing the best answer.

Quick answer

Exhibit-style questions test whether you can read a topology, command output, diagram or table before choosing the best answer.

How to extract the relevant detail from an exhibit.

How topology, command output or routing information affects the answer.

How to avoid answering from memory before reading the evidence.

How to map the exhibit back to the exam objective.

Related practice questions

Related DEA-C01 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Data Ingestion and Transformation practice questions

Targeted DEA-C01 practice covering Data Ingestion and Transformation.

Data Operations and Support practice questions

Targeted DEA-C01 practice covering Data Operations and Support.

Data Security and Governance practice questions

Targeted DEA-C01 practice covering Data Security and Governance.

Data Store Management practice questions

Sharpen your DEA-C01 knowledge of Data Store Management.

DEA-C01 fundamentals practice questions

Work through DEA-C01 questions on DEA-C01 fundamentals.

DEA-C01 scenario practice questions

DEA-C01 scenario practice questions for DEA-C01.

DEA-C01 troubleshooting practice questions

Targeted DEA-C01 practice covering DEA-C01 troubleshooting.

Practice set

Practice scenarios

Question 1mediummultiple choice
Full question →

Refer to the exhibit. A data engineer notices that the Redshift cluster 'mycluster' does not have automated backups beyond 7 days. However, the compliance team requires a minimum of 35 days of backup retention. What should the engineer do?

Exhibit

Refer to the exhibit.
```
[ec2-user@ip-10-0-0-1 ~]$ aws redshift describe-clusters --cluster-identifier mycluster
{
    "Clusters": [
        {
            "ClusterIdentifier": "mycluster",
            "NodeType": "dc2.large",
            "NumberOfNodes": 2,
            "ClusterStatus": "available",
            "DBName": "dev",
            "MasterUsername": "admin",
            "AutomatedSnapshotRetentionPeriod": 7,
            "ManualSnapshotRetentionPeriod": 30,
            "ClusterVersion": "1.0"
        }
    ]
}
```
Question 2mediummultiple choice
Full question →

A data engineer is troubleshooting a failed AWS Glue ETL job that reads from and writes to the S3 bucket 'example-bucket'. The job's IAM role has the policy shown in the exhibit. The job fails with an Access Denied error when writing to a prefix 'output/'. Which permission is MISSING?

Exhibit

Refer to the exhibit.

IAM Policy:
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject"
            ],
            "Resource": "arn:aws:s3:::example-bucket/*"
        },
        {
            "Effect": "Allow",
            "Action": "s3:ListBucket",
            "Resource": "arn:aws:s3:::example-bucket"
        }
    ]
}
Question 3mediummultiple choice
Full question →

Refer to the exhibit. An AWS Glue ETL job is failing with an OutOfMemoryError. The job reads from Amazon S3 and performs a GROUP BY on a large dataset. Which change should the data engineer make to resolve this error?

Exhibit

Error Log:
[ERROR] org.apache.spark.SparkException: Job aborted due to stage failure: Task 0 in stage 1.0 failed 4 times, most recent failure: Lost task 0.3 in stage 1.0 (TID 6, ip-10-0-0-12.ec2.internal, executor 1): java.lang.OutOfMemoryError: Java heap space
	at org.apache.spark.sql.catalyst.expressions.UnsafeRow.<init>(UnsafeRow.java:42)
Question 4mediummultiple choice
Full question →

Refer to the exhibit. This log snippet is from a failed AWS Glue job. The job processes a large dataset in memory. What is the MOST likely cause of the OutOfMemoryError?

Exhibit

2024-05-10T12:00:00Z ERROR 1234567890 Job failed: java.lang.OutOfMemoryError: Java heap space
2024-05-10T12:01:00Z INFO  1234567890 Job terminated with exit code 1
Question 5hardmultiple choice
Full question →

Refer to the exhibit. A data engineer has attached this bucket policy to an S3 bucket named data-lake-bucket. The engineer wants to allow only GET requests from the corporate network (10.0.0.0/16) over HTTPS. However, users report that they cannot access objects even when connected to the corporate network. What is the issue?

Exhibit

Refer to the exhibit.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Deny",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::data-lake-bucket/*",
                "arn:aws:s3:::data-lake-bucket"
            ],
            "Condition": {
                "Bool": {
                    "aws:SecureTransport": "false"
                }
            }
        },
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::data-lake-bucket/*",
            "Condition": {
                "IpAddress": {
                    "aws:SourceIp": "10.0.0.0/16"
                }
            }
        }
    ]
}
Question 6hardmultiple choice
Full question →

Refer to the exhibit. A data engineer is troubleshooting an IAM policy attached to a user. The user reports that they cannot upload objects to the S3 bucket 'data-lake-bucket' unless they explicitly specify the 'x-amz-server-side-encryption' header with value 'AES256'. The engineer wants to modify the policy to allow uploads without requiring encryption headers, but still enforce encryption on the bucket itself. Which change should the engineer make?

Exhibit

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Resource": [
        "arn:aws:s3:::data-lake-bucket/*",
        "arn:aws:s3:::data-lake-bucket"
      ],
      "Condition": {
        "StringEquals": {
          "s3:x-amz-server-side-encryption": "AES256"
        }
      }
    },
    {
      "Effect": "Deny",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::data-lake-bucket/*",
      "Condition": {
        "StringNotEquals": {
          "s3:x-amz-server-side-encryption": "AES256"
        }
      }
    }
  ]
}
Question 7easymultiple choice
Review the full subnetting walkthrough →

Refer to the exhibit. A data engineer sees this error log from an Amazon EC2 instance that is trying to access an S3 bucket in the us-west-2 region. The EC2 instance is in a VPC with a private subnet and no internet gateway. What is the MOST likely cause of this error?

Exhibit

Refer to the exhibit.

2024-03-15 10:23:45,678 ERROR [main] com.amazonaws.services.s3.AmazonS3Client : Unable to execute HTTP request: Connect to my-bucket.s3.us-west-2.amazonaws.com:443 [my-bucket.s3.us-west-2.amazonaws.com/10.0.0.1] failed: connect timed out
Question 8easymultiple choice
Full question →

Refer to the exhibit. An IAM policy includes this statement. What access does it grant?

Exhibit

Refer to the exhibit.

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": "10.0.0.0/8"
        }
      }
    }
  ]
}
Question 9mediummultiple choice
Full question →

Refer to the exhibit. An IAM policy is attached to an IAM user. The user is trying to download an object from the S3 bucket 'example-bucket' from an IP address 10.1.1.1, but the request is denied. What is the most likely reason?

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": "10.0.0.0/16"
        }
      }
    }
  ]
}
Question 10mediummultiple choice
Full question →

Refer to the exhibit. A DynamoDB table 'Orders' has a GSI 'CustomerDateIndex'. A developer tries to query the GSI for all orders of a customer between two dates. The query fails. What is the most likely reason?

Exhibit

Refer to the exhibit.

{
  "Tables": [
    {
      "TableName": "Orders",
      "KeySchema": [
        {"AttributeName": "order_id", "KeyType": "HASH"},
        {"AttributeName": "customer_id", "KeyType": "RANGE"}
      ],
      "AttributeDefinitions": [
        {"AttributeName": "order_id", "AttributeType": "S"},
        {"AttributeName": "customer_id", "AttributeType": "S"},
        {"AttributeName": "order_date", "AttributeType": "S"}
      ],
      "GlobalSecondaryIndexes": [
        {
          "IndexName": "CustomerDateIndex",
          "KeySchema": [
            {"AttributeName": "customer_id", "KeyType": "HASH"},
            {"AttributeName": "order_date", "KeyType": "RANGE"}
          ],
          "Projection": {"ProjectionType": "ALL"}
        }
      ]
    }
  ]
}
Question 11mediummultiple choice
Full question →

Refer to the exhibit. A data engineer attaches this bucket policy to an S3 bucket. A developer tries to upload an object to the bucket using the AWS CLI with the command: `aws s3 cp file.txt s3://my-bucket/`. The upload fails. What is the most likely reason?

Exhibit

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Deny",
      "Principal": "*",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::my-bucket/*",
      "Condition": {
        "StringNotEquals": {
          "s3:x-amz-server-side-encryption": "aws:kms"
        }
      }
    },
    {
      "Effect": "Deny",
      "Principal": "*",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::my-bucket/*",
      "Condition": {
        "Null": {
          "s3:x-amz-server-side-encryption": "true"
        }
      }
    }
  ]
}
Question 12easymultiple choice
Full question →

Refer to the exhibit. A data engineer runs the above CLI command to find files smaller than 1000 bytes in a bucket. The command returns an empty array, but the engineer knows there are small files. What is the issue?

Network Topology
aws s3api list-objects-v2bucket my-bucketprefix logs/2023/01/01/query "Contents[?Size < '1000']"Refer to the exhibit.
Question 13easymultiple choice
Full question →

Refer to the exhibit. A company uses S3 Event Notifications to trigger an AWS Lambda function whenever a new object is uploaded to an S3 bucket. The Lambda function processes the file and moves it to a different bucket. Recently, the function has been failing intermittently. The engineer checks the Lambda CloudWatch logs and sees the above event. What is the MOST likely cause of the intermittent failures?

Exhibit

Refer to the exhibit.

{
  "Events": [
    {
      "EventID": "1",
      "EventVersion": "1.0",
      "EventSource": "aws:s3",
      "AwsRegion": "us-east-1",
      "EventName": "ObjectCreated:Put",
      "UserIdentity": {
        "principalId": "AWS:AIDAEXAMPLE"
      },
      "RequestParameters": {
        "sourceIPAddress": "192.0.2.1"
      },
      "ResponseElements": {
        "x-amz-request-id": "EXAMPLE123"
      },
      "S3": {
        "s3SchemaVersion": "1.0",
        "bucket": {
          "name": "source-bucket",
          "arn": "arn:aws:s3:::source-bucket"
        },
        "object": {
          "key": "data/file.csv",
          "size": 1024,
          "eTag": "abc123",
          "sequencer": "0055AED6DCD90281E5"
        }
      }
    }
  ]
}
Question 14hardmultiple choice
Full question →

Refer to the exhibit. A data engineer ran the CLI command to check the configuration of an RDS instance named 'mydb'. Which statement accurately describes the current configuration?

Network Topology
aws rds describe-db-instancesdb-instance-identifier mydbquery 'DBInstances[0].[Engineoutput textRefer to the exhibit.Output:mysql available False None
Question 15mediummultiple choice
Full question →

Refer to the exhibit. An IAM policy is attached to an EC2 instance role that runs a data ingestion application. The application reads files from an S3 bucket 'data-lake-primary' and sends records to a Kinesis stream named 'clickstream'. The application is failing with an 'AccessDenied' error when trying to read from S3. What is the MOST likely cause?

Exhibit

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:PutObject"
      ],
      "Resource": "arn:aws:s3:::data-lake-primary/*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "kinesis:PutRecord",
        "kinesis:PutRecords"
      ],
      "Resource": "arn:aws:kinesis:us-east-1:123456789012:stream/clickstream"
    }
  ]
}

These DEA-C01 practice questions are part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style DEA-C01 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.