A company wants to run analytics on its Elastic Load Balancing logs stored in Amazon S3. A data analyst needs to be able to query all data from a desired year, month, or day. The data analyst should also be able to query a subset of the columns. The company requires minimal operational overhead and the most cost-effective solution.
Which approach meets these requirements for optimizing and querying the log data?

1. A. Use an AWS Glue job nightly to transform new log files into .csv format and partition by year, month, and da
2. B. Use AWS Glue crawlers to detect new partition
3. C. Use Amazon Athena to query data.
4. D. Launch a long-running Amazon EMR cluster that continuously transforms new log files from Amazon S3 into its Hadoop Distributed File System (HDFS) storage and partitions by year, month, and da
5. E. Use Apache Presto to query the optimized format.
6. F. Launch a transient Amazon EMR cluster nightly to transform new log files into Apache ORC format and partition by year, month, and da
7. G. Use Amazon Redshift Spectrum to query the data.
8. H. Use an AWS Glue job nightly to transform new log files into Apache Parquet format and partition by year, month, and da
9. I. Use AWS Glue crawlers to detect new partition
10. J. Use Amazon Athena to querydata.

Correct Answer: C

A data analyst is using Amazon QuickSight for data visualization across multiple datasets generated by applications. Each application stores files within a separate Amazon S3 bucket. AWS Glue Data Catalog is used as a central catalog across all application data in Amazon S3. A new application stores its data within a separate S3 bucket. After updating the catalog to include the new application data source, the data analyst created a new Amazon QuickSight data source from an Amazon Athena table, but the import into SPICE failed.
How should the data analyst resolve the issue?

1. A. Edit the permissions for the AWS Glue Data Catalog from within the Amazon QuickSight console.
2. B. Edit the permissions for the new S3 bucket from within the Amazon QuickSight console.
3. C. Edit the permissions for the AWS Glue Data Catalog from within the AWS Glue console.
4. D. Edit the permissions for the new S3 bucket from within the S3 console.

Correct Answer: B

A company uses Amazon Redshift as its data warehouse A new table includes some columns that contain sensitive data and some columns that contain non-sensitive data The data in the table eventually will be referenced by several existing queries that run many times each day
A data analytics specialist must ensure that only members of the company's auditing team can read the columns that contain sensitive data All other users must have read-only access to the columns that contain non-sensitive data
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Grant the auditing team permission to read from the tabl
2. B. Load the columns that contain non-sensitive data into a second tabl
3. C. Grant the appropriate users read-only permissions to the second table.
4. D. Grant all users read-only permissions to the columns that contain non-sensitive data Use the GRANT SELECT command to allow the auditing team to access the columns that contain sensitive data
5. E. Grant all users read-only permissions to the columns that contain non-sensitive data Attach an 1AM policy to the auditing team with an explicit Allow action that grants access to the columns that contain sensitive data
6. F. Grant the auditing team permission to read from the table Create a view of the table that includes the columns that contain non-sensitive data Grant the appropriate users read-only permissions to that view

Correct Answer: B
https://aws.amazon.com/jp/about-aws/whats-new/2020/03/announcing-column-level-access-control-for-amazon

A company is building a service to monitor fleets of vehicles. The company collects IoT data from a device in each vehicle and loads the data into Amazon Redshift in near-real time. Fleet owners upload .csv files containing vehicle reference data into Amazon S3 at different times throughout the day. A nightly process loads the vehicle reference data from Amazon S3 into Amazon Redshift. The company joins the IoT data from the device and the vehicle reference data to power reporting and dashboards. Fleet owners are frustrated by waiting a day for the dashboards to update.
Which solution would provide the SHORTEST delay between uploading reference data to Amazon S3 and the change showing up in the owners’ dashboards?

1. A. Use S3 event notifications to trigger an AWS Lambda function to copy the vehicle reference data into Amazon Redshift immediately when the reference data is uploaded to Amazon S3.
2. B. Create and schedule an AWS Glue Spark job to run every 5 minute
3. C. The job inserts reference data into Amazon Redshift.
4. D. Send reference data to Amazon Kinesis Data Stream
5. E. Configure the Kinesis data stream to directly load the reference data into Amazon Redshift in real time.
6. F. Send the reference data to an Amazon Kinesis Data Firehose delivery strea
7. G. Configure Kinesis with a buffer interval of 60 seconds and to directly load the data into Amazon Redshift.

Correct Answer: A

A central government organization is collecting events from various internal applications using Amazon Managed Streaming for Apache Kafka (Amazon MSK). The organization has configured a separate Kafka topic for each application to separate the data. For security reasons, the Kafka cluster has been configured to only allow TLS encrypted data and it encrypts the data at rest.
A recent application update showed that one of the applications was configured incorrectly, resulting in writing data to a Kafka topic that belongs to another application. This resulted in multiple errors in the analytics pipeline as data from different applications appeared on the same topic. After this incident, the organization wants to prevent applications from writing to a topic different than the one they should write to.
Which solution meets these requirements with the least amount of effort?

1. A. Create a different Amazon EC2 security group for each applicatio
2. B. Configure each security group to have access to a specific topic in the Amazon MSK cluste
3. C. Attach the security group to each application based on the topic that the applications should read and write to.
4. D. Install Kafka Connect on each application instance and configure each Kafka Connect instance to write to a specific topic only.
5. E. Use Kafka ACLs and configure read and write permissions for each topi
6. F. Use the distinguished name of the clients’ TLS certificates as the principal of the ACL.
7. G. Create a different Amazon EC2 security group for each applicatio
8. H. Create an Amazon MSK cluster and Kafka topic for each applicatio
9. I. Configure each security group to have access to the specific cluster.

Correct Answer: B