A data engineer is designing a data pipeline that ingests sensitive financial data from an on-premises system into Amazon S3. The data must be encrypted both during transmission and while stored. Which configuration should they use?

Upload the data using HTTPS and enable S3 versioning.

Use AWS Direct Connect for the transfer and rely on the physical security of the connection.

Use an AWS Site-to-Site VPN for the transfer and enable default encryption on the S3 bucket with SSE-S3.

Use AWS Snowball to transfer the data and enable S3 Object Lock.

Which AWS service or feature is used to encrypt data in transit between a client and an application?

AWS Identity and Access Management (IAM)

When should a Privacy Impact Assessment (PIA) be conducted?

Before starting a new data processing activity that involves personal data

Annually, regardless of changes

Only after a data breach occurs

Only when required by law enforcement

AWSCertified Data Engineer - Associate

Domain 4Objective 5

Task 4.5: Understand Data Privacy and Governance DEA-C01 Practice Questions (Page 1)

Part of the Content Domain 4: Data Security and Governance domain, which accounts for 18% of the DEA-C01 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

12concepts

18%of the exam

Questions 1–5

1foundation · medium
A company is establishing a data governance framework. Which component defines who is accountable for specific data assets and decision rights?
Select an answer first
2foundation · medium
Under GDPR, an individual requests that their personal data be deleted from a company's data store. Which data subject right does this request represent?
Select an answer first
3application · medium
A data engineer is designing a data pipeline that ingests sensitive financial data from an on-premises system into Amazon S3. The data must be encrypted both during transmission and while stored. Which configuration should they use?
Select an answer first
4foundation · medium
Which AWS service or feature is used to encrypt data in transit between a client and an application?
Select an answer first
5foundation · medium
When should a Privacy Impact Assessment (PIA) be conducted?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DEA-C01” is a trademark of its owner, used for identification only.

Task 4.5: Understand Data Privacy and Governance DEA-C01 Practice Questions (Page 1)

Questions 1–5

A company is establishing a data governance framework. Which component defines who is accountable for specific data assets and decision rights?

Under GDPR, an individual requests that their personal data be deleted from a company's data store. Which data subject right does this request represent?

A data engineer is designing a data pipeline that ingests sensitive financial data from an on-premises system into Amazon S3. The data must be encrypted both during transmission and while stored. Which configuration should they use?

Which AWS service or feature is used to encrypt data in transit between a client and an application?

When should a Privacy Impact Assessment (PIA) be conducted?

Keep studying — Content Domain 4: Data Security and Governance