🔥 40% Off Crucial Exams Memberships — This Week Only

3 days, 7 hours remaining!
Crucial Exams

AWS Certified Data Engineer Associate DEA-C01 Practice Question

Your company runs multiple AWS Glue jobs whose execution logs are written to Amazon CloudWatch Logs in the data-engineering account. Compliance requires retaining an immutable copy of all log events for 7 years in a separate audit account where auditors can run ad-hoc Amazon Athena queries. The data-engineering team wants a managed solution that requires no changes to existing Glue jobs and minimal maintenance. Which solution meets these requirements MOST effectively?

  • Enable AWS CloudTrail Lake in the data-engineering account and share the lake with the audit account to provide long-term, queryable storage of the Glue logs.

  • Create a CloudWatch Logs subscription filter that sends each Glue log group to a Kinesis Data Firehose delivery stream writing to an S3 bucket in the audit account. Enable S3 Object Lock compliance mode and allow Athena access.

  • Schedule an AWS Lambda function that uses the aws logs export-task CLI command to periodically export each log group to an S3 Standard-IA bucket, then replicate the bucket to the audit account.

  • Modify every Glue job to write its logs directly to an S3 bucket in the audit account using a custom Python logger configured with S3 Object Lock.

AWS Certified Data Engineer Associate DEA-C01
Data Operations and Support
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot