Exam AWS Certified Data Engineer - Associate DEA-C01 topic 1 question 192 discussion

Exam question from Amazon's AWS Certified Data Engineer - Associate DEA-C01

Question #: 192
Topic #: 1

[All AWS Certified Data Engineer - Associate DEA-C01 Questions]

A company stores customer data in an Amazon S3 bucket. Multiple teams in the company want to use the customer data for downstream analysis. The company needs to ensure that the teams do not have access to personally identifiable information (PII) about the customers.

Which solution will meet this requirement with LEAST operational overhead?

A. Use Amazon Macie to create and run a sensitive data discovery job to detect and remove PII.
B. Use S3 Object Lambda to access the data, and use Amazon Comprehend to detect and remove PII.
C. Use Amazon Data Firehose and Amazon Comprehend to detect and remove PII.
D. Use an AWS Glue DataBrew job to store the PII data in a second S3 bucket. Perform analysis on the data that remains in the original S3 bucket.

Show Suggested Answer

Suggested Answer: B 🗳️

by kupo777 at Nov. 4, 2024, 11:10 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

praveenu

3 months ago

Selected Answer: B

https://docs.aws.amazon.com/AmazonS3/latest/userguide/tutorial-s3-object-lambda-redact-pii.html With S3 Object Lambda and a prebuilt AWS Lambda function powered by Amazon Comprehend, you can protect PII data retrieved from S3 before returning it to an application.

upvoted 1 times

...

HagarTheHorrible

8 months ago

Selected Answer: B

it is not A, Macie can only detect the PII

upvoted 3 times

...

WarPig666

8 months ago

Selected Answer: B

A can’t be correct. Macie can discover PII, but not automatically redact it.

upvoted 2 times

...

paali

8 months, 1 week ago

Selected Answer: B

Macie will only detect sensitive data, it can't redact it. So, we can use option B With S3 Object Lambda and a prebuilt AWS Lambda function powered by Amazon Comprehend, you can protect PII data retrieved from S3 before returning it to an application.

upvoted 2 times

...

7a1d491

8 months, 1 week ago

Selected Answer: A

Amazon Macie is a fully managed data security and privacy service that uses machine learning to automatically discover, classify, and protect sensitive data, including personally identifiable information (PII). By running a sensitive data discovery job in Macie, the company can automatically identify PII in the S3 bucket and provide actionable insights to help secure it. The operational overhead is minimized because Macie handles the discovery and classification of PII automatically.

upvoted 1 times

...

michele_scar

9 months ago

Selected Answer: B

https://docs.aws.amazon.com/AmazonS3/latest/userguide/tutorial-s3-object-lambda-redact-pii.html

upvoted 2 times

...

kupo777

9 months, 2 weeks ago

Correct Answer: A Amazon Macie is designed specifically for discovering and protecting sensitive data within AWS environments. It automates the process of identifying PII in your S3 buckets, allowing you to create jobs that can regularly scan for and manage sensitive information. This approach minimizes manual effort and integrates well into existing workflows, providing ongoing protection without requiring additional infrastructure or complex setups.

upvoted 3 times

...