Download AWS Data Analytics Ultimate Exam and more Exams Technology in PDF only on Docsity!
Question 1. Which AWS service is best suited for ingesting high‑velocity streaming data with millisecond‑level latency and requires explicit shard management? A) Amazon Kinesis Data Firehose B) Amazon Kinesis Data Streams C) Amazon MSK (Managed Streaming for Apache Kafka) D) AWS Snowball Edge Answer: B Explanation: Kinesis Data Streams provides low‑latency ingestion and lets you define and manage shards to control throughput. Question 2. When you need a fully managed, serverless solution that automatically buffers, optionally transforms data with Lambda, and delivers to Amazon S3, Redshift, or OpenSearch, which service should you choose? A) Amazon Kinesis Data Streams B) Amazon Kinesis Data Firehose C) AWS Glue Elastic Views D) Amazon Managed Service for Apache Flink Answer: B Explanation: Kinesis Data Firehose handles buffering, optional Lambda transformations, and direct delivery to the listed destinations without requiring shard management. Question 3. Which feature of Amazon MSK allows clients to authenticate using AWS IAM credentials instead of traditional TLS certificates? A) IAM role‑based access control (RBAC) B) IAM authentication for Kafka C) SASL‑SCRAM authentication D) Mutual TLS authentication Answer: B Explanation: MSK supports IAM authentication, enabling Kafka clients to use AWS IAM credentials for secure access.
Question 4. A company must physically move 30 PB of archival data to AWS. Which Snow Family device is designed for this scale? A) Snowcone B) Snowball Edge C) Snowmobile D) Snowball Standard Answer: C Explanation: Snowmobile is a 45‑foot shipping container that can transport up to 100 PB, making it suitable for extremely large data transfers. Question 5. Which AWS Transfer Family protocol allows existing SFTP workflows to seamlessly read and write objects in Amazon S3 without changing client software? A) FTPS B) SFTP C) FTP D) HTTP / HTTPS Answer: B Explanation: The Transfer Family’s SFTP server provides an SFTP endpoint that maps directly to S buckets, preserving legacy workflows. Question 6. In AWS Database Migration Service (DMS), what is the primary difference between a “full‑load” migration and “CDC” (Change Data Capture)? A) Full‑load migrates schema only; CDC migrates data only B) Full‑load copies existing data; CDC continuously replicates changes after the load C) Full‑load uses AWS Glue; CDC uses AWS Lambda D) Full‑load requires source downtime; CDC does not Answer: B Explanation: Full‑load copies the existing dataset, while CDC captures ongoing changes after the initial load to keep source and target in sync.
Question 10. In AWS Glue, which execution engine is optimized for Python‑based ETL jobs and can automatically scale without managing Spark clusters? A) Apache Spark B) AWS Glue Ray engine C) EMR Serverless D) AWS Lambda Answer: B Explanation: The Glue Ray engine is a serverless Python execution environment that scales automatically and does not rely on Spark. Question 11. Which AWS service enables visual data preparation without writing code, allowing users to clean, normalize, and enrich data through a point‑and‑click interface? A) AWS Glue DataBrew B) Amazon QuickSight C) AWS Lake Formation D) Amazon EMR Studio Answer: A Explanation: Glue DataBrew provides a visual, no‑code environment for data preparation tasks. Question 12. When configuring an Amazon EMR cluster for a mixed workload of Spark and Hive, which instance configuration reduces cost by allowing Spot Instances for core nodes while keeping the master on On‑Demand? A) Uniform Instance Group B) Instance Fleets with mixed pricing C) Dedicated Instances only D) EMR Serverless Answer: B Explanation: Instance Fleets let you define a mix of On‑Demand and Spot instances for core nodes, optimizing cost while keeping the master stable.
Question 13. Which EMR feature allows you to run Spark, Hive, and Presto jobs without provisioning or managing EC2 instances? A) EMR Managed Scaling B) EMR Serverless C) EMR Classic D) EMR on EKS Answer: B Explanation: EMR Serverless is a fully managed compute engine that runs analytics workloads without managing clusters. Question 14. Amazon Managed Service for Apache Flink is best suited for which type of data processing? A) Batch ETL jobs B) Real‑time stream transformations with low‑latency stateful processing C) Ad‑hoc querying of S3 data D) Static data cataloging Answer: B Explanation: Managed Flink provides low‑latency, stateful stream processing for real‑time analytics. Question 15. Which AWS Lambda trigger is most appropriate for processing new objects uploaded to an S3 bucket in near real‑time? A) CloudWatch Events rule B) S3 Event Notification C) DynamoDB Streams D) Kinesis Data Streams Answer: B Explanation: S3 Event Notifications can invoke Lambda functions directly when objects are created. Question 16. In Amazon Redshift, which node type separates compute and managed storage, allowing you to scale storage independently of compute?
D) When you need automatic vacuuming Answer: B Explanation: Interleaved sort keys optimize query performance for filters on any of the defined columns, regardless of order. Question 20. Which of the following best describes a key performance‑tuning technique for Amazon Athena? A) Increase the number of EC2 instances in the workgroup B) Use partitioning and columnar formats such as Parquet C) Enable auto‑scaling for the Athena server D) Store data in CSV format for faster reads Answer: B Explanation: Partitioning and columnar storage reduce the amount of data scanned, improving Athena query performance and reducing cost. Question 21. Athena Federated Query enables you to query data that resides in which type of source? A) Only Amazon S B) Only Amazon RDS C) Multiple data sources, including relational databases and NoSQL stores, via connectors D) Only Amazon DynamoDB Answer: C Explanation: Federated Query uses connectors to query data across various external data stores in addition to S3. Question 22. Which Amazon OpenSearch Service feature helps you retain logs for a defined period while reducing storage costs? A) Index lifecycle management (ILM) policies B) Automatic snapshot to S3 every hour C) Cross‑cluster replication D) Fine‑grained access control
Answer: A Explanation: ILM policies automate index rollover, retention, and deletion to manage storage costs. Question 23. In Amazon QuickSight, what does the SPICE engine provide? A) Real‑time streaming data ingestion B) In‑memory data storage for fast visual analytics C) Direct connection to Redshift without caching D) Automatic data cataloging Answer: B Explanation: SPICE (Super‑Fast, Parallel, In‑Memory Calculation Engine) caches data in memory for rapid analysis. Question 24. Which QuickSight feature enables end‑users to ask natural‑language questions and receive visual answers? A) QuickSight Q B) Amazon Lex integration C) QuickSight Stories D) QuickSight Insights Answer: A Explanation: QuickSight Q interprets natural language queries and generates visualizations automatically. Question 25. Which IAM principle helps minimize security risk by granting only the permissions required to perform a task? A) Defense in depth B) Least privilege C) Role‑based access control (RBAC) D) Policy inheritance Answer: B
Question 29. Which AWS service records API calls for audit and compliance purposes? A) AWS Config B) AWS CloudTrail C) Amazon GuardDuty D) AWS Security Hub Answer: B Explanation: CloudTrail captures API activity across AWS services for governance and compliance. Question 30. Amazon Macie primarily helps with which security task? A) Encrypting data at rest B) Detecting and classifying sensitive data such as PII in S3 buckets C) Managing IAM roles D) Monitoring network traffic Answer: B Explanation: Macie uses machine learning to discover, classify, and protect sensitive data stored in S3. Question 31. Which VPC component provides private connectivity to AWS services without traversing the public internet? A) Internet Gateway B) NAT Gateway C) VPC Endpoint (Gateway) D) Security Group Answer: C Explanation: A VPC Endpoint (Gateway) allows private, direct access to services like S3 and DynamoDB within the AWS network. Question 32. When designing a cost‑effective analytics pipeline for intermittent workloads, which combination is generally the most economical?
A) Amazon Redshift provisioned clusters + EMR B) Amazon Athena + AWS Glue (serverless) + S C) Amazon RDS + Kinesis Data Streams D) EC2‑based Spark cluster + S Answer: B Explanation: Serverless services (Athena, Glue) only charge for actual usage, making them cheaper for sporadic workloads. Question 33. Decoupling storage from compute in a data lake architecture primarily provides which benefit? A) Faster network throughput B) Independent scaling of storage and compute resources, reducing cost and increasing flexibility C) Automatic data encryption D) Built‑in data versioning Answer: B Explanation: Decoupling allows you to scale S3 storage and compute services (Athena, EMR) independently. Question 34. Which service offers lower latency for ingesting data from IoT devices compared to Kinesis Data Firehose? A) Amazon S3 Transfer Acceleration B) Amazon Kinesis Data Streams C) AWS Snowball Edge D) AWS DataSync Answer: B Explanation: Kinesis Data Streams provides sub‑second latency, whereas Firehose buffers data before delivery. Question 35. A data engineer needs to transform JSON logs in real time, enrich them with reference data from a DynamoDB table, and write the result to Amazon OpenSearch Service. Which managed service can accomplish this with minimal code?
A) S3 Select can only be used with Parquet files. B) It reduces the amount of data transferred to the client by filtering on the server side. C) It requires an EMR cluster to execute the query. D) It encrypts the selected data with a separate key. Answer: B Explanation: S3 Select performs server‑side filtering, returning only the requested rows/columns, thus reducing data transfer. Question 39. In AWS Glue, which of the following options is required to enable schema‑on‑read for a data source that does not have a predefined schema? A) Define a Glue Schema Registry entry manually. B) Create a crawler that infers the schema. C) Use Lake Formation to enforce a static schema. D) Enable AWS DMS CDC. Answer: B Explanation: Crawlers infer schemas from raw data, enabling schema‑on‑read during ETL jobs. Question 40. Which compression format provides the highest compression ratio for text data, albeit at slower decompression speed? A) Snappy B) Gzip C) Zstd D) LZ Answer: B Explanation: Gzip offers high compression ratios for text but is slower to decompress compared to Snappy or LZ4. Question 41. A data scientist needs to run an ad‑hoc Spark job on a 500 GB dataset stored in S without managing a cluster. Which service should be used? A) Amazon EMR on EC
B) EMR Serverless C) AWS Glue (Spark) D) Amazon Redshift Serverless Answer: B Explanation: EMR Serverless runs Spark jobs on demand without provisioning or managing clusters. Question 42. Which Amazon Redshift feature allows you to pause and resume a provisioned cluster to save costs during idle periods? A) Redshift Spectrum B) Redshift Concurrency Scaling C) Redshift Serverless D) Redshift Elastic Resize Answer: C Explanation: Redshift Serverless automatically scales compute and can be paused when not in use, reducing cost. Question 43. In Amazon Athena, what does the “workgroup” construct primarily control? A) Instance type selection B) Query queueing and result location, as well as cost‑allocation tags C) Data encryption keys D) Automatic schema creation Answer: B Explanation: Workgroups let you set query limits, define where results are stored, and apply cost‑allocation tags. Question 44. Which method can you use to enforce row‑level security (RLS) on data stored in Amazon S3 when accessed via Athena? A) Lake Formation tag‑based policies B) IAM policy conditions on object prefixes C) Athena session‑based filters using IAM policy variables
D) SSE‑KMS automatically rotates the key every 30 days. Answer: B Explanation: Access to decrypt SSE‑KMS objects requires explicit kms:Decrypt permission on the KMS key. Question 48. Which AWS service can automatically discover and classify sensitive data in an Amazon S3 bucket, then generate alerts for non‑compliant objects? A) AWS Config Rules B) Amazon Macie C) AWS Artifact D) AWS Shield Answer: B Explanation: Amazon Macie continuously scans S3 objects for PII and other sensitive data, providing alerts for policy violations. Question 49. In a VPC, which component controls inbound and outbound traffic at the subnet level? A) Security Group B) Network ACL (NACL) C) Route Table D) Internet Gateway Answer: B Explanation: NACLs operate at the subnet level, applying stateless allow/deny rules to inbound and outbound traffic. Question 50. Which of the following is a best practice for securing data pipelines that move data from on‑premises to AWS using AWS Snowball Edge? A) Use default encryption keys only. B) Enable client‑side encryption before loading data onto the device. C) Disable all network interfaces on the device. D) Store data unencrypted to improve transfer speed.
Answer: B Explanation: Client‑side encryption ensures data is encrypted before it is written to the Snowball Edge device. Question 51. Which Amazon Kinesis component automatically scales its underlying resources based on incoming data volume without requiring manual shard configuration? A) Kinesis Data Streams B) Kinesis Data Firehose C) Kinesis Video Streams D) Kinesis Data Analytics Answer: B Explanation: Firehose abstracts scaling; it automatically adjusts buffering and throughput. Question 52. When using AWS DMS with a source MySQL database and a target Amazon Redshift cluster, which feature helps convert MySQL data types to Redshift compatible types? A) DMS CDC only B) Schema Conversion Tool (SCT) integration C) AWS Glue DataBrew D) Lake Formation data mapping Answer: B Explanation: The AWS Schema Conversion Tool (SCT) assists in mapping source data types to target Redshift types. Question 53. Which of the following statements about Amazon EMR instance fleets is true? A) All instances in a fleet must be the same instance type. B) Fleets allow you to specify multiple instance types and pricing models for the same node group. C) Instance fleets cannot use Spot instances. D) Fleets are only available for Hadoop clusters, not Spark. Answer: B
Question 57. Which of the following statements about Amazon Athena’s pricing model is correct? A) You pay per hour for the underlying EC2 instances. B) You pay for the amount of data scanned by each query. C) You pay a flat monthly fee per workgroup. D) You pay per query regardless of data size. Answer: B Explanation: Athena charges based on the total bytes scanned by each query, incentivizing partitioning and compression. Question 58. Which AWS service can be used to orchestrate a multi‑step data workflow that includes Glue jobs, Lambda functions, and Redshift queries? A) AWS Step Functions B) Amazon CloudWatch Events C) AWS Batch D) Amazon EventBridge Scheduler Answer: A Explanation: Step Functions provides state‑machine orchestration for coordinating multiple AWS services in a workflow. Question 59. When configuring Amazon S3 bucket policies for cross‑account access, which principal type must be specified? A) AWS account root user ARN B) IAM role ARN from the external account C) VPC endpoint ID D) S3 Access Point ARN Answer: B Explanation: The bucket policy should reference the IAM role ARN (or user ARN) from the external account that needs access.
Question 60. Which of the following is a primary advantage of using Amazon Redshift Serverless over a provisioned Redshift cluster for unpredictable workloads? A) Unlimited storage capacity without limits. B) Automatic scaling of compute resources and pay‑as‑you‑go pricing. C) Built‑in machine‑learning models. D) Direct integration with AWS Snowball. Answer: B Explanation: Redshift Serverless automatically adjusts compute capacity and charges only for the resources used. Question 61. Which of the following is a recommended practice to reduce the cost of frequent Athena queries on large tables? A) Increase the number of concurrent queries. B) Store the data in CSV format. C) Partition the table on commonly filtered columns and use columnar formats. D) Disable S3 server‑side encryption. Answer: C Explanation: Partitioning and using columnar formats like Parquet minimize scanned data, reducing Athena costs. Question 62. In the context of data lake security, which AWS service can enforce both column‑level and row‑level security on data accessed via Athena, Redshift Spectrum, and EMR? A) AWS IAM B) AWS Lake Formation C) AWS WAF D) Amazon GuardDuty Answer: B Explanation: Lake Formation provides fine‑grained access controls, including column‑ and row‑level security, across multiple analytics services.
