Free Amazon Data-Engineer-Associate Practice Test Questions

Question 1

A company wants to migrate an application and an on-premises Apache Kafka server to AWS. Theapplication processes incremental updates that an on-premises Oracle database sends to the Kafka server. Thecompany wants to use the replatform migration strategy instead of the refactor strategy.Which solution will meet these requirements with the LEAST management overhead?

A : Amazon Kinesis Data Streams

B : Amazon Managed Streaming for Apache Kafka (Amazon MSK) provisioned cluster

C : Amazon Data Firehose

D : Amazon Managed Streaming for Apache Kafka (Amazon MSK) Serverless

Answer: D

Question 2

A financial services company has deployed its application on Amazon EC2 instances within a VPC. For security and compliance reasons, the company needs to ensure that all traffic to their Amazon DynamoDB tables remains within the AWS network and does not traverse the public internet.

Which AWS service or feature should the company use to securely connect its EC2 instances to DynamoDB without using the public internet?

A : Configure a NAT Gateway in the VPC for secure communication with DynamoDB.

B : Establish a VPN connection between the VPC and DynamoDB.

C : Implement AWS PrivateLink to privately connect the VPC to DynamoDB.

D : Use AWS Direct Connect to link the VPC to DynamoDB.

Answer: C

Question 3

A company stores its processed data in an S3 bucket. The company has a strict data access policy. Thecompany uses IAM roles to grant teams within the company different levels of access to the S3 bucket.The company wants to receive notifications when a user violates the data access policy. Each notificationmust include the username of the user who violated the policy.Which solution will meet these requirements?

A : Use AWS Config rules to detect violations of the data access policy. Set up compliance alarms.

B : Use Amazon CloudWatch metrics to gather object-level metrics. Set up CloudWatch alarms.

C : Use AWS CloudTrail to track object-level events for the S3 bucket. Forward events to Amazon CloudWatch to set up CloudWatch alarms.

D : Use Amazon S3 server access logs to monitor access to the bucket. Forward the access logs to an Amazon CloudWatch log group. Use metric filters on the log group to set up CloudWatch alarms.

Answer: C

Question 4

A company stores its processed data in an S3 bucket. The company has a strict data access policy. Thecompany uses IAM roles to grant teams within the company different levels of access to the S3 bucket.The company wants to receive notifications when a user violates the data access policy. Each notificationmust include the username of the user who violated the policy.Which solution will meet these requirements?

A : Use AWS Config rules to detect violations of the data access policy. Set up compliance alarms.

B : Use Amazon CloudWatch metrics to gather object-level metrics. Set up CloudWatch alarms.

C : Use AWS CloudTrail to track object-level events for the S3 bucket. Forward events to Amazon CloudWatch to set up CloudWatch alarms.

D : Use Amazon S3 server access logs to monitor access to the bucket. Forward the access logs to an Amazon CloudWatch log group. Use metric filters on the log group to set up CloudWatch alarms.

Answer: C

Question 5

A company stores operational data in Amazon S3 using the S3 Standard storage class. Data usage analysis shows that most files are frequently accessed for the first 6 months, occasionally accessed for the next 18 months, and rarely accessed thereafter. The company seeks a cost-effective storage strategy that maintains high availability throughout the data lifecycle.

Which S3 Lifecycle policy should the company implement for their data storage needs?

A : Transition objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 6 months, then to S3 Glacier after 2 years.

B : Transition objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 6 months, then to S3 Glacier Deep Archive after 2 years.

C : Transition objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 6 months, then to S3 Glacier Deep Archive after 2 years.

D : Transition objects to S3 Intelligent-Tiering after 6 months, then to S3 Glacier Deep Archive after 2 years.

Answer: C

Free Amazon Data-Engineer-Associate Exam Practice Questions 2026