Which AWS service can be used to monitor and alarm on unusual data access patterns, such as a sudden spike in S3 downloads?

AWS Identity and Access Management (IAM)

A data engineering team manages a data lake with sensitive data. They need to implement fine-grained access control that allows data analysts to access only the columns they need, and also track who accessed what. Which solution should they implement?

Create separate S3 buckets for each column and use bucket policies to control access.

Use IAM policies to restrict access to specific columns and enable S3 server access logging.

Use AWS Glue DataBrew to mask columns and enable AWS Config to track access.

Use Lake Formation column-level security and enable CloudTrail for the data lake.

A data engineer needs to grant a data analyst read-only access to a specific S3 bucket. Which AWS service is used to define and enforce this access policy?

AWS Identity and Access Management (IAM)

AWS Key Management Service (AWS KMS)

AWSCertified Data Engineer - Associate

Domain 4Objective 5

Task 4.5: Understand Data Privacy and Governance DEA-C01 Practice Questions (Page 3)

Part of the Content Domain 4: Data Security and Governance domain, which accounts for 18% of the DEA-C01 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

12concepts

18%of the exam

Questions 11–15

11foundation · medium
A data engineering team is building a pipeline that processes personal data of EU residents. Which regulation directly imposes obligations on how this data must be handled, including requirements for lawful basis and data subject rights?
Select an answer first
12foundation · medium
Which data protection technique irreversibly alters data so that the original values cannot be recovered, even with the same process?
Select an answer first
13foundation · medium
Which AWS service can be used to monitor and alarm on unusual data access patterns, such as a sudden spike in S3 downloads?
Select an answer first
14expert · hard
A data engineering team manages a data lake with sensitive data. They need to implement fine-grained access control that allows data analysts to access only the columns they need, and also track who accessed what. Which solution should they implement?
Select an answer first
15foundation · medium
A data engineer needs to grant a data analyst read-only access to a specific S3 bucket. Which AWS service is used to define and enforce this access policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DEA-C01” is a trademark of its owner, used for identification only.

Task 4.5: Understand Data Privacy and Governance DEA-C01 Practice Questions (Page 3)

Questions 11–15

A data engineering team is building a pipeline that processes personal data of EU residents. Which regulation directly imposes obligations on how this data must be handled, including requirements for lawful basis and data subject rights?

Which data protection technique irreversibly alters data so that the original values cannot be recovered, even with the same process?

Which AWS service can be used to monitor and alarm on unusual data access patterns, such as a sudden spike in S3 downloads?

A data engineering team manages a data lake with sensitive data. They need to implement fine-grained access control that allows data analysts to access only the columns they need, and also track who accessed what. Which solution should they implement?

A data engineer needs to grant a data analyst read-only access to a specific S3 bucket. Which AWS service is used to define and enforce this access policy?

Keep studying — Content Domain 4: Data Security and Governance