AWS Certified Data Engineer Associate DEA-C01 Practice Question

Your data engineering team stores application logs in an Amazon S3 bucket that receives thousands of new objects daily. Compliance requires automatically detecting any newly ingested file that contains credit card numbers and notifying engineers by email within minutes. The solution must be fully managed, involve no code in the pipeline, and minimize operational overhead. Which solution meets these requirements?

  • Enable Amazon Macie for the bucket and create a sensitive data discovery job. Add an Amazon EventBridge rule that matches the finding type "SensitiveData:S3Object/Financial" and publishes the event to an Amazon SNS topic that emails the engineers.

  • Run an AWS Glue crawler to catalog the bucket and schedule an AWS Glue DataBrew profile job that applies regex rules to detect credit card numbers, then use the job completion event to publish a message to Amazon SNS.

  • Configure an S3 event notification that invokes an AWS Lambda function. The function downloads each new object, scans it with a regex for credit card patterns, and publishes a message to Amazon SNS when a match is found.

  • Enable Amazon GuardDuty for the account and create a CloudWatch Logs metric filter that searches for credit card patterns, then configure the metric alarm to trigger an Amazon SNS notification.

AWS Certified Data Engineer Associate DEA-C01
Data Operations and Support
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot