DAS-C01 sample questions

Question 1

An Amazon Redshift database contains sensitive user data. Logging is necessary to meet compliance requirements. The logs must contain database authentication attempts, connections, and disconnections. The logs must also contain each query run against the database and record which database user ran each query.

Which steps will create the required logs?

Accepted Answer

Enable audit logging for Amazon Redshift using the AWS Management Console or the AWS CLI.

Answer

Enable Amazon Redshift Enhanced VPC Routing. Enable VPC Flow Logs to monitor traffic.

Answer

Allow access to the Amazon Redshift database using AWS 1AM only. Log access using AWS CloudTrail.

Answer

Enable and download audit reports from AWS Artifact.

Question 2

A bank operates in a regulated environment. The compliance requirements for the country in which the bank operates say that customer data for each state should only be accessible by the bank’s employees located in the same state. Bank employees in one state should NOT be able to access data for customers who have provided a home address in a different state.

The bank’s marketing team has hired a data analyst to gather insights from customer data for a new campaign being launched in certain states. Currently, data linking each customer account to its home state is stored in a tabular .csv file within a single Amazon S3 folder in a private S3 bucket. The total size of the S3 folder is 2 GB uncompressed. Due to the country’s compliance requirements, the marketing team is not able to access this folder.

The data analyst is responsible for ensuring that the marketing team gets one-time access to customer data for their campaign analytics project, while being subject to all the compliance requirements and controls.

Which solution should the data analyst implement to meet the desired requirements with the LEAST amount of setup effort?

Accepted Answer

Load tabular data from Amazon S3 to Amazon Redshift with the COPY command. Use the built-in row-level security feature in Amazon Redshift to provide marketing employees with appropriate data access under compliance controls. Delete the Amazon Redshift tables after the project.

Answer

Re-arrange data in Amazon S3 to store customer data about each state in a different S3 folder within the same bucket. Set up S3 bucket policies to provide marketing employees with appropriate data access under compliance controls. Delete the bucket policies after the project.

Answer

Load tabular data from Amazon S3 to an Amazon EMR cluster using s3DistCp. Implement a custom Hadoop-based row-level security solution on the Hadoop Distributed File System (HDFS) to provide marketing employees with appropriate data access under compliance controls. Terminate the EMR cluster after the project.

Answer

Load tabular data from Amazon S3 to Amazon QuickSight Enterprise edition by directly importing it as a data source. Use the built-in row-level security feature in Amazon QuickSight to provide marketing employees with appropriate data access under compliance controls. Delete Amazon QuickSight data sources after the project is complete.

Question 3

A media analytics company consumes a stream of social media posts. The posts are sent to an Amazon Kinesis data stream partitioned on userjd. An AWS Lambda function retrieves the records and validates the content before loading the posts into an Amazon Elasticsearch cluster. The validation process needs to receive the posts for a given user in the order they were received. A data analyst has noticed that, during peak hours, the social media platform posts take more than an hour to appear in the Elasticsearch cluster.

What should the data analyst do reduce this latency?

Accepted Answer

Increase the number of shards in the stream.

Answer

Migrate the validation process to Amazon Kinesis Data Firehose.

Answer

Migrate the Lambda consumers from standard data stream iterators to an HTTP/2 stream consumer.

Answer

Configure multiple Lambda functions to process the stream.

Question 4

A global company has different sub-organizations, and each sub-organization sells its products and services in various countries. The company's senior leadership wants to quickly identify which sub-organization is the strongest performer in each country. All sales data is stored in Amazon S3 in Parquet format.

Which approach can provide the visuals that senior leadership requested with the least amount of effort?

Accepted Answer

Use Amazon QuickSight with Amazon Athena as the data source. Use pivot tables as the visual type.

Answer

Use Amazon QuickSight with Amazon Athena as the data source. Use heat maps as the visual type.

Answer

Use Amazon QuickSight with Amazon S3 as the data source. Use heat maps as the visual type.

Answer

Use Amazon QuickSight with Amazon S3 as the data source. Use pivot tables as the visual type.

Question 5

A company uses Amazon Elasticsearch Service (Amazon ES) to store and analyze its website clickstream data. The company ingests 1 TB of data daily using Amazon Kinesis Data Firehose and stores one day’s worth of data in an Amazon ES cluster.

The company has very slow query performance on the Amazon ES index and occasionally sees errors from Kinesis Data Firehose when attempting to write to the index. The Amazon ES cluster has 10 nodes running a single index and 3 dedicated master nodes. Each data node has 1.5 TB of Amazon EBS storage attached and the cluster is configured with 1,000 shards. Occasionally, JVMMemoryPressure errors are found in the cluster logs.

Which solution will improve the performance of Amazon ES?

Accepted Answer

Decrease the number of Amazon ES shards for the index.

Answer

Increase the memory of the Amazon ES master nodes.

Answer

Decrease the number of Amazon ES data nodes.

Answer

Increase the number of Amazon ES shards for the index.

Question 6

A company leverages Amazon Athena for ad-hoc queries against data stored in Amazon S3. The company wants to implement additional controls to separate query execution and query history among users, teams, or applications running in the same AWS account to comply with internal security policies.

Which solution meets these requirements?

Accepted Answer

Create an 1AM role for each given use case, assign appropriate permissions to the role for the given use case, and add the role to associate the role with Athena.

Answer

Create an S3 bucket for each given use case, create an S3 bucket policy that grants permissions to appropriate individual 1AM users, and apply the S3 bucket policy to the S3 bucket.

Answer

Create an Athena workgroup for each given use case, apply tags to the workgroup, and create an 1AM policy using the tags to apply appropriate permissions to the workgroup.

Answer

Create an AWS Glue Data Catalog resource policy for each given use case that grants permissions to appropriate individual 1AM users, and apply the resource policy to the specific tables used by Athena.

DAS-C01 Data Analytics - Specialty Practice Questions

Unlock the full exam and previous versions

Create an account to continue.

Create an account to continue.

Related exams