Task 4.1: Apply Authentication Mechanisms DEA-C01 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has an S3 bucket that is accessed by multiple applications. The company wants to enforce different access permissions for different applications using the same bucket, without creating multiple buckets. Which AWS feature should they use?

   • AIAM roles with different policies
   • BS3 lifecycle policies
   • CS3 Access Points
   • DS3 bucket policies
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A data engineer is setting up a VPC endpoint for S3 to allow private connectivity from a VPC. The engineer needs to ensure that only authorized IAM principals can access the S3 bucket through the endpoint. Which configuration is required?

   • ACreate an IAM role and attach it to the VPC endpoint.
   • BSet the VPC endpoint's network ACL to allow only specific IAM principals.
   • CAttach a resource-based policy to the VPC endpoint that specifies which IAM principals are allowed.
   • DConfigure the VPC endpoint to use an IAM group for authentication.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A data engineer is evaluating whether to use AWS Lambda (managed) or an EC2 instance (unmanaged) for a data processing job. What is a key trade-off between these two options?

   • ALambda requires the engineer to manage the underlying servers, while EC2 does not.
   • BBoth Lambda and EC2 provide the same level of control over the runtime environment.
   • CLambda provides more control over the runtime environment, while EC2 is more limited.
   • DLambda reduces operational overhead because AWS manages the infrastructure, but it limits control over the runtime environment.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A startup is building a data pipeline on AWS. They have a small team and want to minimize operational overhead. They need to run a scheduled ETL job that processes data from S3 and loads it into Redshift. They also need to manage the underlying infrastructure for the ETL job. Which AWS service should they choose?

   • AAWS Glue
   • BAWS Lambda
   • CAmazon EC2 with a cron job
   • DAmazon EMR
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses AWS CLI on a developer's laptop to manage data pipeline resources. The developer needs to access an S3 bucket and a DynamoDB table. The company wants to avoid creating long-term access keys and wants to follow best practices. What should the company do?

   • AUse a shared access key stored in a team vault.
   • BCreate an IAM user with an access key and attach a policy that allows S3 and DynamoDB access.
   • CAttach the AmazonS3FullAccess and AmazonDynamoDBFullAccess managed policies to the developer's IAM user.
   • DUse IAM Identity Center to grant the developer temporary credentials via AWS CLI.
   Reveal Solution Discussion Select an answer first