AWSCertified Data Engineer - Associate
Domain 4Objective 3
Task 4.3: Ensure Data Encryption and Masking DEA-C01 Practice Questions (Page 5)
Part of the Content Domain 4: Data Security and Governance domain, which accounts for 18% of the DEA-C01 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)
27questions here
6free pages
8concepts
18%of the exam
Questions 21–25
- 21
A healthcare organization must protect patient health information. Which compliance standard is most directly applicable to their data encryption and masking practices?
Select an answer first - 22
Which AWS service provides encryption at rest for Amazon EBS volumes by default?
Select an answer first - 23
A data engineer needs to ensure that data stored in an Amazon S3 bucket is encrypted at rest. Which AWS service is used to manage the encryption keys for S3 server-side encryption?
Select an answer first - 24
Which AWS service provides centralized management of encryption keys, including the ability to create, rotate, and control access to customer master keys (CMKs)?
Select an answer first - 25
Which data masking technique involves randomly reordering the values within a column so that the original values are still present but associated with different rows?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DEA-C01” is a trademark of its owner, used for identification only.