Exam AWS Certified Data Analytics - Specialty All Questions

View all questions & answers for the AWS Certified Data Analytics - Specialty exam

Exam AWS Certified Data Analytics - Specialty topic 1 question 133 discussion

Exam question from Amazon's AWS Certified Data Analytics - Specialty

Question #: 133
Topic #: 1

[All AWS Certified Data Analytics - Specialty Questions]

A data architect is building an Amazon S3 data lake for a bank. The goal is to provide a single data repository for customer data needs, such as personalized recommendations. The bank uses Amazon Kinesis Data Firehose to ingest customers' personal information bank accounts, and transactions in near-real time from a transactional relational database. The bank requires all personally identifiable information (PII) that is stored in the AWS Cloud to be masked.
Which solution will meet these requirements?

A. Invoke an AWS Lambda function from Kinesis Data Firehose to mask PII before delivering the data into Amazon S3.
B. Use Amazon Made, and configure it to discover and mask PII.
C. Enable server-side encryption (SSE) in Amazon S3.
D. Invoke Amazon Comprehend from Kinesis Data Firehose to detect and mask PII before delivering the data into Amazon S3.

Show Suggested Answer

Suggested Answer: A 🗳️

by rb39 at April 21, 2022, 3:05 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

alfredofmt

Highly Voted 2 years, 11 months ago

A - CORRECT, Lambda function is used as on-the-fly masking due to the requirement "All PII on the AWS Cloud must be hidden" B - WRONG, the requirement "All PII on the AWS Cloud must be hidden" imposes that masking must be performed on-the-fly, while Macie can be applied to data already in S3. https://aws.amazon.com/blogs/big-data/automate-the-archival-and-deletion-of-sensitive-data-using-amazon-macie/ C - WRONG, encryption != masking D - WRONG, Amazon Comprehend PII API has no integration with KDF

upvoted 11 times

ccpmad

2 years ago

"that is stored in the AWS Cloud to be masked" is not on the fly I am still between A and B.

upvoted 2 times

...

njraman

Most Recent 1 year, 11 months ago

D : Correct answer and we do have intergration https://aws.amazon.com/blogs/machine-learning/redact-sensitive-data-from-streaming-data-in-near-real-time-using-amazon-comprehend-and-amazon-kinesis-data-firehose/

upvoted 1 times

...

pk349

2 years, 2 months ago

A: I passed the test

upvoted 2 times

...

Jerry84

2 years, 4 months ago

Selected Answer: A

https://aws.amazon.com/blogs/machine-learning/redact-sensitive-data-from-streaming-data-in-near-real-time-using-amazon-comprehend-and-amazon-kinesis-data-firehose/ From the link above, A makes more sense.

upvoted 1 times

...

Ody__

2 years, 6 months ago

Selected Answer: A

https://aws.amazon.com/blogs/machine-learning/protect-pii-using-amazon-s3-object-lambda-to-process-and-modify-data-during-retrieval/

upvoted 2 times

ccpmad

2 years ago

Yes it should be A. But they should also write the question better. As "that is stored in the AWS Cloud to be masked" is not clear. Be masked before or could be after stored.

upvoted 2 times

...

[Removed]

2 years, 6 months ago

A https://aws.amazon.com/blogs/machine-learning/protect-pii-using-amazon-s3-object-lambda-to-process-and-modify-data-during-retrieval/

upvoted 1 times

...

rocky48

2 years, 6 months ago

Selected Answer: A

A might be the answer. Amazon Comprehend is used for unstructured data.

upvoted 2 times

...

rav009

2 years, 8 months ago

Selected Answer: A

the source is a relational database, so you can get to know which column has PII and need masked. So A. And aws comprehend is for text

upvoted 1 times

...

he11ow0rId

2 years, 10 months ago

Selected Answer: A

Between A and D, don't think Comprehend is invokable by KDF, and shouldn't be used for structured data (at least not efficient), hence A

upvoted 3 times

...

ystotest

2 years, 10 months ago

A Correct. Amazon Comprehend is used for unstructured data. Apparently, not the case here

upvoted 3 times

...

rocky48

2 years, 11 months ago

Selected Answer: D

upvoted 1 times

rocky48

2 years, 6 months ago

Given the use-case, i guess A could be a better option.

upvoted 1 times

...

vpatel3701

2 years, 11 months ago

D https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-comprehend-helps-mask-personally-identifiable-information-from-text-documents/

upvoted 1 times

...

Ramshizzle

3 years ago

Selected Answer: B

I feel like there is a mistake in this question. Without looking at the answers I would choose to use Amazon Macie. Maybe Answer B was supposed to say Amazon Macie instead of Amazon Made?? Amazon Made is not a real service. If Macie is not an option I would choose A. Because just using encryption is not hiding PII and I don't think it is possible invoke Amazon Comprehend from FireHose.

upvoted 4 times