A company centralizes VPC flow logs from many accounts into a single S3 bucket. Logs are stored as text files compressed with gzip and must be retained indefinitely. Analysts run ad hoc Athena queries against these logs, but query performance is degrading as log volume grows. You must both improve query performance and reduce storage usage. Which change will provide the LARGEST performance improvement?
Choose an answer
Tap an option to check your answer.
Correct answer: Reconfigure the VPC flow log delivery to write files in Apache Parquet format and organize them using hourly partitions..
Why this is the answer
Reconfiguring VPC flow log delivery to use Apache Parquet format and hourly partitions offers the largest performance improvement. Parquet is a columnar storage format that significantly reduces the amount of data Athena needs to scan for queries, leading to faster execution and lower costs. Hourly partitioning further optimizes queries by allowing Athena to prune irrelevant data, scanning only the partitions containing the requested time range. Decompressing and recompressing with bzip2 might slightly reduce storage but won't fundamentally improve query performance as the data remains row-oriented. S3 Transfer Acceleration speeds up uploads, not query performance, and S3 Intelligent-Tiering is for cost optimization, not query speed. A new Athena workgroup or engine version 2 might offer minor improvements but won't address the core issue of inefficient data storage and organization as effectively as Parquet and partitioning.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed