Crucial Exams

AWS Certified Data Engineer Associate DEA-C01 Practice Question

A retail company plans to ingest click-stream events with Apache Kafka. Security mandates that producer and consumer applications authenticate only with short-lived IAM role credentials, and that the data engineering team must not build or rotate cluster user passwords. Which deployment choice meets the requirement while minimizing operational effort?

  • Deploy an Apache Kafka cluster on Amazon EC2 behind a Network Load Balancer and enforce mutual TLS with private certificates from AWS Certificate Manager Private CA.

  • Create an Amazon MSK cluster but disable IAM access control, instead using SASL/SCRAM authentication with credentials stored in Secrets Manager.

  • Deploy an Apache Kafka cluster on Amazon EC2 instances and configure SASL/SCRAM authentication, storing usernames and passwords in AWS Secrets Manager.

  • Provision an Amazon MSK cluster with IAM access control enabled so clients authenticate with SigV4-signed requests using their IAM roles.

AWS Certified Data Engineer Associate DEA-C01
Data Security and Governance
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot