nerdexam
Amazon

DEA-C01 · Question #175

A data engineer needs to onboard a new data producer into AWS. The data producer needs to migrate data products to AWS. The data producer maintains many data pipelines that support a business…

The correct answer is B. Create an AWS Direct Connect connection to the on-premises data center. Store the service. AWS Direct Connect provides a dedicated, private network connection between the on-premises data center and AWS, ensuring that data is not transferred over the public internet. This fulfills the requirement of secure, private connectivity. AWS Secrets Manager securely stores…

Data Security and Governance

Question

A data engineer needs to onboard a new data producer into AWS. The data producer needs to migrate data products to AWS. The data producer maintains many data pipelines that support a business application. Each pipeline must have service accounts and their corresponding credentials. The data engineer must establish a secure connection from the data producer's on-premises data center to AWS. The data engineer must not use the public internet to transfer data from an on-premises data center to AWS. Which solution will meet these requirements?

Options

  • AInstruct the new data producer to create Amazon Machine Images (AMIs) on Amazon Elastic
  • BCreate an AWS Direct Connect connection to the on-premises data center. Store the service
  • CCreate a security group in a public subnet. Configure the security group to allow only connections
  • DCreate an AWS Direct Connect connection to the on-premises data center. Store the application

How the community answered

(34 responses)
  • A
    12% (4)
  • B
    76% (26)
  • C
    3% (1)
  • D
    9% (3)

Explanation

AWS Direct Connect provides a dedicated, private network connection between the on-premises data center and AWS, ensuring that data is not transferred over the public internet. This fulfills the requirement of secure, private connectivity. AWS Secrets Manager securely stores, rotates, and manages access to sensitive information such as service account credentials, reducing the need to embed credentials in code or configuration files.

Topics

#Hybrid Connectivity#Secrets Management#IAM#Secure Data Transfer

Community Discussion

No community discussion yet for this question.

Full DEA-C01 Practice