8 of the 40 questions in this set, with the correct answer marked and explained.
1. Which AWS service provides centralized logging and auditing of API calls made in your AWS account?
✓AWS CloudTrail
AWS CloudTrail is a service that enables governance, compliance, and operational and risk auditing of your AWS account. It provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
✗Amazon CloudWatch
✗AWS Trusted Advisor
✗AWS Config
2. A data engineer needs to protect sensitive data by masking it before storing it in a database. Which AWS service can be used for data masking?
✗Amazon Macie
✗Amazon RDS
✓AWS Glue DataBrew
AWS Glue DataBrew allows you to easily clean and normalize data, including data masking, to protect sensitive information before storing it in databases or data warehouses.
✗AWS Secrets Manager
3. A data engineer needs to enforce data governance policies across multiple AWS accounts. Which service should be used?
✗AWS Config
✓AWS Organizations
AWS Organizations helps you centrally manage and govern your environment as you grow and scale your AWS resources across multiple accounts. It allows you to enforce data governance policies and ensure compliance.
✗AWS Lake Formation
✗AWS CloudFormation
4. Which AWS service helps you protect your web applications from common web exploits and vulnerabilities?
✗Amazon GuardDuty
✗AWS Secrets Manager
✗AWS Shield
✓AWS WAF
AWS WAF (Web Application Firewall) helps protect your web applications from common web exploits and vulnerabilities by allowing you to create rules that block common attack patterns, such as SQL injection or cross-site scripting (XSS).
5. Which AWS service allows you to run SQL queries on structured and semi-structured data stored in S3 without the need to move data to a database?
✗Amazon Redshift
✗Amazon EMR
✗AWS Glue
✓Amazon Athena
Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. It is serverless, so there's no infrastructure to manage, and you only pay for the queries you run.
6. A data engineer needs to implement data versioning and lifecycle policies to manage data stored in Amazon S3. Which feature should be enabled?
✗S3 Transfer Acceleration
✗S3 Object Lock
✗S3 Select
✓S3 Versioning
S3 Versioning is used to keep multiple versions of an object in one bucket, enabling you to restore previous versions if needed. This is useful for managing data lifecycle policies and ensuring data integrity.
7. Which AWS service provides real-time monitoring and logging capabilities for applications running in AWS?
✗AWS CloudTrail
✓Amazon CloudWatch
Amazon CloudWatch is a monitoring and management service that provides data and actionable insights to monitor your applications, respond to system-wide performance changes, and optimize resource utilization.
✗AWS Trusted Advisor
✗AWS Config
8. A data engineer needs to run SQL queries on data stored in Amazon S3. Which service should be used?
✗AWS Glue
✗Amazon Redshift
✓Amazon Athena
Amazon Athena is an interactive query service that allows you to analyze data directly in Amazon S3 using standard SQL, making it easy to perform ad-hoc analysis without the need to move data.
✗Amazon RDS
32 more questions in the app
Practise the full 40-question set with a timer, scoring and progress tracking.