MLS-C01 Data Engineering Practice Question

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:PutObject"
      ],
      "Resource": "arn:aws:s3:::my-data-lake/*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "glue:GetTable",
        "glue:GetDatabase"
      ],
      "Resource": "*"
    }
  ]
}

An IAM policy attached to an AWS Glue job allows reading and writing to an S3 bucket and accessing Glue Data Catalog. The job fails with an access denied error when trying to create a table in the Data Catalog. What is the likely issue?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The policy does not include the glue:CreateTable action.

The policy allows GetTable and GetDatabase actions, but not CreateTable. The job needs glue:CreateTable permission. The S3 actions are sufficient. The error is specifically about creating a table.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The Glue Data Catalog is not enabled for the account.
Why it's wrong here
If the catalog were disabled, other actions would also fail.
✗
The job does not have permission to write to the S3 bucket.
Why it's wrong here
The policy includes s3:PutObject.
✗
The S3 bucket is encrypted with a KMS key that the job cannot access.
Why it's wrong here
No KMS permissions are in the policy, but error is about catalog, not S3.
✓
The policy does not include the glue:CreateTable action.
Why this is correct
Only GetTable and GetDatabase are allowed, not CreateTable.

Quick reference

AWS S3 Storage Class Comparison

Storage Class	Min Duration	Retrieval	Use Case
S3 Standard	None	Immediate	Frequently accessed data
S3 Standard-IA	30 days	Immediate	Infrequent access, rapid retrieval
S3 One Zone-IA	30 days	Immediate	Non-critical infrequent data
S3 Intelligent-Tiering	None	Immediate–hours	Unknown or changing access patterns
S3 Glacier Instant	90 days	Milliseconds	Archive with instant retrieval
S3 Glacier Flexible	90 days	Minutes–hours	Archive, flexible retrieval
S3 Glacier Deep Archive	180 days	Hours	Long-term compliance archive

Go deeper

Practice tests

Work through a scored set and see where your weak spots actually are.

MLS-C01 Practice Exam 1 — 20 Questions→MLS-C01 Practice Exam 2 — 20 Questions→MLS-C01 Practice Test 2 — 25 Questions→

Domain-focused practice

Each of these maps to a scored section of the exam blueprint.

Data Engineering Modeling Exploratory Data Analysis Machine Learning Implementation and Operations

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, multi-select, and more.

Browse scenarios

Topic-level practice

Target a specific weak area. Each page focuses on one exam topic with questions, explanations and a concept guide.

Data Engineering practice questions MLS-C01 fundamentals practice questions MLS-C01 scenario practice questions Exploratory Data Analysis practice questions

Where to go next

Study guide Exam domains AWS Certified Machine Learning Specialty MLS-C01 exam guide

This MLS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLS-C01 exam.

MLS-C01 Data Engineering Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

AWS S3 Storage Class Comparison

Related to this question