A data engineering team runs an AWS Glue job that reads from a JDBC connection to a PostgreSQL database. The job has started failing with a 'Connection timed out' error. The database is in a private subnet. What should the team check first?

The database's backup configuration to ensure it is not in a maintenance window.

The IAM role's permissions to access the JDBC connection.

The security group attached to the Glue job's VPC endpoint and the route table for the subnet.

The CloudWatch Logs for the Glue job to see if there are any SQL syntax errors.

A data engineering team uses Amazon EMR to run data processing jobs. They want to be notified when a job fails, but they also want to know if the cluster is underutilized so they can optimize costs. What should they do?

Use CloudWatch Logs Insights to query the EMR logs for error messages and create a metric filter for 'FAILED'.

Create CloudWatch alarms for the EMR cluster's 'JobsFailed' metric and 'ClusterIdle' metric, and configure SNS notifications for both.

Create an SNS topic and have the EMR cluster publish a message when a job fails or the cluster is idle.

Use CloudTrail to monitor API calls and set up an SNS topic for any 'RunJobFlow' calls.

A security team needs to audit all AWS API calls made by users in their organization, including calls that read data from S3 buckets. They have enabled CloudTrail, but they are not sure if data events are being logged. What should they do to ensure data events are captured?

Create a new CloudTrail trail and enable data events for the S3 buckets.

Create an SNS topic and subscribe to it to receive notifications for S3 API calls.

Enable S3 server access logging on the S3 buckets.

Use AWS Config to record S3 bucket configurations.

A data engineer wants to automatically send application logs from an EC2 instance to Amazon CloudWatch Logs. Which component must be installed on the EC2 instance to accomplish this?

AWS Systems Manager Agent (SSM Agent)

AWSCertified Data Engineer - Associate

Domain 3Objective 3

Task 3.3: Maintain and Monitor Data Pipelines DEA-C01 Practice Questions (Page 2)

Part of the Content Domain 3: Data Operations and Support domain, which accounts for 22% of the DEA-C01 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

22%of the exam

Questions 6–10

6application · medium
A data engineering team runs an AWS Glue job that reads from a JDBC connection to a PostgreSQL database. The job has started failing with a 'Connection timed out' error. The database is in a private subnet. What should the team check first?
Select an answer first
7application · medium
A data engineering team uses Amazon EMR to run data processing jobs. They want to be notified when a job fails, but they also want to know if the cluster is underutilized so they can optimize costs. What should they do?
Select an answer first
8application · medium
A security team needs to audit all AWS API calls made by users in their organization, including calls that read data from S3 buckets. They have enabled CloudTrail, but they are not sure if data events are being logged. What should they do to ensure data events are captured?
Select an answer first
9foundation · easy
A data engineer wants to automatically send application logs from an EC2 instance to Amazon CloudWatch Logs. Which component must be installed on the EC2 instance to accomplish this?
Select an answer first
10foundation · easy
A data pipeline runs on Amazon EC2 instances and writes custom application logs. Which AWS service can be used to collect and monitor these logs in a centralized location?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DEA-C01” is a trademark of its owner, used for identification only.