Exam AWS Certified Data Engineer - Associate DEA-C01 topic 1 question 235 discussion

Exam question from Amazon's AWS Certified Data Engineer - Associate DEA-C01

Question #: 235
Topic #: 1

[All AWS Certified Data Engineer - Associate DEA-C01 Questions]

A company manages an Amazon Redshift data warehouse. The data warehouse is in a public subnet inside a custom VPC. A security group allows only traffic from within itself. An ACL is open to all traffic.

The company wants to generate several visualizations in Amazon QuickSight for an upcoming sales event. The company will run QuickSight Enterprise edition in a second AWS account inside a public subnet within a second custom VPC. The new public subnet has a security group that allows outbound traffic to the existing Redshift cluster.

A data engineer needs to establish connections between Amazon Redshift and QuickSight. QuickSight must refresh dashboards by querying the Redshift cluster.

Which solution will meet these requirements?

A. Configure the Redshift security group to allow inbound traffic on the Redshift port from the QuickSight security group.
B. Assign Elastic IP addresses to the QuickSight visualizations. Configure the QuickSight security group to allow inbound traffic on the Redshift port from the Elastic IP addresses.
C. Confirm that the CIDR ranges of the Redshift VPC and the QuickSight VPC are the same. If CIDR ranges are different, reconfigure one CIDR range to match the other. Establish network peering between the VPCs.
D. Create a QuickSight gateway endpoint in the Redshift VPC. Attach an endpoint policy to the gateway endpoint to ensure only specific QuickSight accounts can use the endpoint.

Show Suggested Answer

Suggested Answer: A 🗳️

by rdiaz at July 4, 2025, 5:01 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

rdiaz

1 month, 2 weeks ago

Selected Answer: A

The Redshift cluster must explicitly allow inbound connections on its port (default is 5439) from QuickSight. • Since the QuickSight deployment is in a different AWS account and VPC, and security groups are stateful, you need to modify the Redshift security group to accept traffic from the QuickSight security group or from the specific IP range or CIDR block used by QuickSight. • This enables QuickSight to initiate queries to Redshift to refresh dashboards.

upvoted 1 times

...