AWS · DEA-C01
Validates ability to implement data pipelines and to monitor, troubleshoot, and optimize cost and performance issues in accordance with best practices.
Practice Questions
1,120
≈ 17 practice exams
Duration
130 minutes
Passing Score
720/1000
Difficulty
AssociateLast Updated
Jan 2026
Use this DEA-C01 practice exam to prepare for AWS Certified Data Engineer - Associate (DEA-C01) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 1,120 questions for AWS DEA-C01, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Data Ingestion and Transformation, Data Store Management, Data Operations and Support, and Data Security and Governance. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The AWS Certified Data Engineer – Associate (DEA-C01) is an associate-level credential that validates a practitioner's ability to implement, monitor, and optimize data pipelines on AWS. Launched in 2023, it is the first AWS certification designed specifically for data engineers, replacing the need to cobble credentials from Solutions Architect or Data Analytics Specialty exams. The exam assesses proficiency across the full data engineering lifecycle: ingesting and transforming data, selecting and managing appropriate data stores, orchestrating pipelines using programming concepts, and enforcing data security and governance policies using AWS-native tooling.
Key AWS services in scope include Amazon S3, AWS Glue, Amazon Redshift, Amazon Kinesis, Amazon EMR, AWS Lake Formation, Amazon DynamoDB, AWS Database Migration Service, and Amazon Athena, among others. Candidates are evaluated on their ability to compare cost and performance trade-offs between services, apply SQL on AWS platforms, implement encryption and access controls, and validate data quality and consistency. Out-of-scope topics include ML model training and inference, programming-language-specific syntax, and deriving business conclusions from data analysis.
The target candidate is a data engineer or data architect with roughly 2–3 years of experience in data engineering and at least 1–2 years of hands-on AWS experience. This includes professionals who design and maintain ETL/ELT pipelines, manage data lakes and warehouses, or work with real-time streaming architectures. Adjacent roles transitioning into cloud data engineering — such as database administrators, backend developers, or traditional ETL developers — will also find this certification a clear roadmap for bridging legacy skills with AWS-native approaches.
The exam suits those who regularly work with concepts such as volume, variety, and velocity of data; data modeling and schema design; data lifecycle management; and cloud security and governance. It is not aimed at data scientists, ML engineers, or business analysts, as those domains fall outside the exam's scope.
AWS does not enforce formal prerequisites for the DEA-C01, but the official exam guide recommends 2–3 years of data engineering or data architecture experience and 1–2 years of hands-on work with AWS services. Candidates should be comfortable setting up and maintaining ETL pipelines from ingestion to destination, writing and executing SQL queries, using Git-based source control workflows, and applying language-agnostic programming concepts (loops, conditionals, data structures).
On the AWS side, recommended knowledge includes familiarity with data pipeline orchestration services (AWS Glue, AWS Step Functions), storage systems (Amazon S3, Amazon Redshift, Amazon DynamoDB), streaming platforms (Amazon Kinesis), and security/governance services (AWS IAM, AWS KMS, AWS Lake Formation). Understanding of data lakes, networking fundamentals (VPC, subnets, connectivity), compute options (Amazon EMR, AWS Lambda), and vector/embedding concepts is also beneficial. While no prior AWS certification is required, having the AWS Cloud Practitioner or AWS Solutions Architect – Associate background provides a useful foundation.
The DEA-C01 exam consists of 65 total questions: 50 scored questions that contribute to the final result and 15 unscored pilot questions that AWS uses to evaluate future content. Unscored questions are not identified, so candidates should treat all questions equally. Question types are multiple choice (one correct answer from four options) and multiple response (two or more correct answers from five or more options). The time limit is 130 minutes, and the exam is delivered via Pearson VUE at a testing center or through an online proctored session. The exam is available in English, Japanese, Korean, and Simplified Chinese, and costs $150 USD.
Scores are reported on a scaled range of 100–1,000, and the minimum passing score is 720. AWS uses a compensatory scoring model, meaning candidates do not need to achieve a passing threshold in each individual domain — only the overall scaled score matters. Unanswered questions are treated as incorrect; there is no penalty for guessing. The certification is valid for three years, after which recertification requires passing the current version of the exam.
The DEA-C01 certification targets one of the fastest-growing roles in cloud computing. AWS-certified data engineers in the US report average salaries around $141,000 per year according to Glassdoor data, with entry-level positions starting near $124,000–$130,000 and senior roles exceeding $175,000. Research from the Jefferson Frank Careers and Hiring Guide found that 73% of AWS professionals saw a salary increase after certification, averaging approximately 27%. Job roles accessible with this credential include Data Engineer, Cloud Data Architect, ETL/ELT Developer, Data Platform Engineer, and Analytics Engineer.
AWS certifications appear in cloud job postings more than any other vendor credential, and the DEA-C01 specifically validates the services — Glue, Redshift, Kinesis, S3 — that dominate real-world data engineering job requirements. For professionals transitioning from database administration, backend development, or traditional ETL roles, the certification provides a structured path into cloud-native data engineering. Many candidates report role transitions or salary increases within 3–6 months of earning the credential. Pairing DEA-C01 with the Databricks Data Engineer Associate certification is widely considered the most job-market-relevant two-certification combination in the data engineering space.
5 sample questions with answers and explanations. The full bank has 1,120 questions, enough for 17 full-length practice exams.
Preview — answers shown1. A data engineer at Litware Corp is building a Step Functions workflow to process customer order files uploaded to S3. Each file is a CSV containing between 500 and 500,000 order records. The workflow must invoke a Lambda function to validate each record against business rules and write valid records to DynamoDB. The engineer needs the solution to handle the largest files efficiently with high parallelism. Which Step Functions configuration should the engineer use? (Select one!)
Explanation
The Distributed Map state is purpose-built for processing large-scale datasets stored in S3. It natively reads CSV and JSON files from S3 using an ItemReader configuration, distributes items across up to 10,000 parallel child workflow executions, and each child execution maintains its own separate execution history. This makes it ideal for processing 500,000 records efficiently. The Inline Map state supports a maximum concurrency of 40 concurrent iterations and shares execution history with the parent workflow, which is capped at 25,000 entries. For 500,000 records, the parent workflow would far exceed the 25,000 execution history entry limit, causing the workflow to fail. Additionally, the Inline Map requires input as a JSON array passed from a previous state rather than reading S3 files directly. The Parallel state requires a fixed number of branches defined at design time and cannot dynamically scale to variable record counts. A Choice state provides conditional branching logic but does not enable parallel processing of dataset items.
2. A data engineer at Adatum Sciences needs to securely connect an AWS Glue ETL job to an Amazon RDS PostgreSQL database in a private VPC subnet. The Glue job also needs to write output data to Amazon S3. The VPC does not have a NAT gateway. Which combination of networking configurations must the data engineer implement? (Select two!)
Multiple correct answersExplanation
A Glue connection with VPC configuration requires a security group with a self-referencing inbound rule allowing all TCP traffic from itself. This is because Glue workers communicate with each other during distributed processing, and the security group must permit this internal traffic. An S3 gateway endpoint added to the VPC route table provides free, private connectivity from the VPC to S3 without requiring a NAT gateway or internet access. This is the recommended approach for Glue jobs in private subnets that need to access S3. Using a public subnet would expose the RDS database to potential internet access, violating the private subnet requirement. Elastic IP addresses cannot be attached to Glue ENIs as Glue manages its own network interfaces. While an S3 interface endpoint via PrivateLink would work, it incurs hourly costs per AZ, whereas the S3 gateway endpoint is free and is the AWS-recommended solution for this scenario.
3. Contoso Logistics operates a data lake on Amazon S3 with data cataloged in AWS Glue Data Catalog. The team is migrating access control from IAM-based policies to AWS Lake Formation. However, they cannot migrate all workloads simultaneously because some production applications depend on existing IAM policies for S3 and Glue access. The team needs to incrementally migrate to Lake Formation without disrupting existing workloads. Which Lake Formation feature should the team use? (Select one!)
Explanation
Lake Formation hybrid access mode allows data administrators to selectively enable Lake Formation permissions for specific principals while all other principals continue to access the same Data Catalog resources through existing IAM and S3 policies. This provides an incremental migration path, allowing the team to onboard one workload or set of users at a time to Lake Formation permissions without disrupting production applications that still rely on IAM-based access. Creating duplicate catalog entries would cause data inconsistency and double maintenance overhead. Data filters provide fine-grained access control within Lake Formation but do not address the coexistence of IAM and Lake Formation permission models during migration. Setting up a separate account adds significant complexity and requires data replication or sharing configurations that are unnecessary when hybrid access mode solves the problem directly.
4. Tailspin Toys is building a data mesh architecture where multiple business units own their data products. Each unit uses Amazon Redshift Serverless with separate workgroups. The central data governance team needs to create a unified data catalog that allows discovery across all business units' data while enforcing column-level access controls. Which approach meets these requirements? (Select one!)
Explanation
Registering Redshift Serverless namespaces as federated catalogs in AWS Lake Formation provides a unified data catalog with centralized governance. Lake Formation supports column-level data filters and LF-Tag-based access control, enabling the governance team to enforce fine-grained access policies across all business units' data products from a single control plane. This aligns with data mesh principles of domain ownership with centralized governance. Redshift data sharing with manual Glue Catalog registration requires ongoing manual maintenance and does not provide integrated column-level access control. Exporting metadata to S3 and crawling creates a stale catalog that does not reflect real-time schema changes and lacks integrated access controls. Cross-database queries with Redshift RBAC work within Redshift but do not provide a unified discovery catalog accessible to tools like Athena or other analytics services.
5. Adatum Media uses Amazon OpenSearch Service to index and search log data from web applications. The cluster currently stores 90 days of data, but queries typically only access the most recent 7 days. Older data is rarely queried but must remain searchable for compliance. The data engineer needs to reduce storage costs while keeping all data accessible. Which OpenSearch feature should the engineer configure? (Select one!)
Explanation
OpenSearch ISM policies automate the lifecycle management of indices by transitioning them through storage tiers. UltraWarm provides S3-backed storage that is significantly cheaper than hot storage while keeping data directly queryable. Cold storage further reduces costs for rarely accessed data, though indices must be reattached to UltraWarm before querying. This approach keeps all data searchable while optimizing costs based on access patterns. Moving OpenSearch snapshots to S3 Glacier makes the data unsearchable without a full restore process, violating the requirement for data to remain searchable. Cross-cluster replication creates another full-cost cluster for older data, which increases rather than reduces costs. Index rollups aggregate data into summaries, losing the original detail, which may violate compliance requirements that mandate retention of raw log data.
AWS Certified AI Practitioner (AIF-C01)
AIF-C01 · 426 questions
AWS Certified Cloud Practitioner (CLF-C02)
CLF-C02 · 600 questions
AWS Certified CloudOps Engineer - Associate (SOA-C03)
SOA-C03 · 2141 questions
AWS Certified Developer - Associate (DVA-C02)
DVA-C02 · 536 questions
AWS Certified DevOps Engineer - Professional (DOP-C02)
DOP-C02 · 436 questions
AWS Certified Generative AI Developer - Professional (AIP-C01)
AIP-C01 · 1978 questions
$17.99
One-time access to this exam