Question 1

A Cloud Data Engineering Consultant is tasked with setting up a centralized logging solution for multiple AWS Lambda functions used by a client's serverless application. The application has critical real-time processing components, and the engineering consultant must ensure that logging is set up to capture and respond to error conditions rapidly. The logs must be analyzed for specific error patterns, and notifications must be sent out when these patterns are detected.

Which of the following steps should the Cloud Data Engineering Consultant take to establish a robust logging and notification system using Amazon CloudWatch Logs? (Select TWO)

Options :

A : Configure each Lambda function to automatically send execution logs to CloudWatch Logs and set up metric filters to match the specific error patterns.

B : Directly modify each Lambda function-s code to include API calls that send logs to a dedicated CloudWatch Logs group.

C : Set up CloudWatch Alarms based on the metric filters, triggering notifications through Amazon Simple Notification Service (SNS) when error patterns are found.

D : Use Amazon Kinesis Data Firehose to collect logs from Lambda functions and then process them with Amazon CloudWatch for real-time analysis.

E : Implement a custom logging layer within the Lambda functions to batch and push logs asynchronously to an Amazon DynamoDB table for subsequent analysis and alerting.

Answer: A,C

Question 2

A Cloud Data Engineer is designing a serverless data processing pipeline on AWS. The pipeline uses AWS Lambda for data transformation, AWS Step Functions for workflow management, and Amazon DynamoDB for storing intermediate data. The engineer decides to use the AWS Serverless Application Model (AWS SAM) to manage the deployment of these components. The primary requirement is to ensure that the deployment process is repeatable and easily modifiable.

What should the engineer include in the SAM template to meet these requirements efficiently?

Options :

A : Include the Lambda functions and DynamoDB tables in the SAM template, but exclude the Step Functions, as they are not supported by AWS SAM.

B : Specify only the Lambda function in the SAM template, manually configuring the Step Functions and DynamoDB tables through the AWS Console.

C : Use separate SAM templates for each component (Lambda, Step Functions, DynamoDB) to manage deployments individually for better control.

D : Define all the components (Lambda functions, Step Functions, DynamoDB tables) in the SAM template, and use AWS CloudFormation to deploy the entire pipeline

Answer: D

Question 3

A company plans to migrate its on-premises Oracle database to Amazon Aurora PostgreSQL. They need to ensure a seamless migration of both the database schema and the data with minimal downtime. The company also requires a tool to convert the source database schema to be compatible with Amazon Aurora PostgreSQL.

Which combination of AWS services should the company use to migrate the database schema and data?

Options :

A : Utilize Amazon RDS for data migration and AWS Lambda for schema conversion.

B : Use AWS Database Migration Service (DMS) for data migration and AWS Schema Conversion Tool (SCT) for schema conversion.

C : Implement AWS Glue for both schema conversion and data migration.

D : Apply Amazon S3 transfer acceleration for data migration and Amazon Athena for schema conversion.

Answer: B

Question 4

A company's security team mandates that their Amazon RDS databases should only accept connections from specific, known IP addresses to ensure security. As a data engineer, you are tasked with implementing this requirement for an RDS instance that will be accessed by multiple clients located in different geographical locations, each with a fixed set of IP addresses.

Which of the following would be the most effective and secure way to comply with this security requirement?

Options :

A : Implement a network Access Control List (ACL) with rules to allow the known IP addresses and deny all others, applying these to the subnet associated with the RDS instance.

B : Configure AWS WAF with a set of rules to allowlist the specific IP addresses, and associate these rules with the RDS instance.

C : Utilize AWS Identity and Access Management (IAM) policies to restrict database access to the specific IP addresses.

D : Modify the inbound rules of the RDS instance-s security group to allow traffic from the known IP addresses and deny all other traffic.

Answer: D

Question 5

A data engineer needs to use AWS Step Functions to design an orchestration workflow. The workflow must parallel process a large collection of data files and apply a specific transformation to each file. Which Step Functions state should the data engineer use to meet these requirements?

Options :

A : Parallel state

B : Choice state

C : Map state

D : Wait state

Answer: C