ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Data Analytics - Specialty All Questions

View all questions & answers for the AWS Certified Data Analytics - Specialty exam
Go to Exam

Exam AWS Certified Data Analytics - Specialty topic 1 question 133 discussion

Exam question from Amazon's AWS Certified Data Analytics - Specialty
Question #: 133
Topic #: 1
[All AWS Certified Data Analytics - Specialty Questions]

A data architect is building an Amazon S3 data lake for a bank. The goal is to provide a single data repository for customer data needs, such as personalized recommendations. The bank uses Amazon Kinesis Data Firehose to ingest customers' personal information bank accounts, and transactions in near-real time from a transactional relational database. The bank requires all personally identifiable information (PII) that is stored in the AWS Cloud to be masked.
Which solution will meet these requirements?

  • A. Invoke an AWS Lambda function from Kinesis Data Firehose to mask PII before delivering the data into Amazon S3.
  • B. Use Amazon Made, and configure it to discover and mask PII.
  • C. Enable server-side encryption (SSE) in Amazon S3.
  • D. Invoke Amazon Comprehend from Kinesis Data Firehose to detect and mask PII before delivering the data into Amazon S3.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by rb39 at April 21, 2022, 3:05 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
alfredofmt
Highly Voted 2 years, 8 months ago
A - CORRECT, Lambda function is used as on-the-fly masking due to the requirement "All PII on the AWS Cloud must be hidden" B - WRONG, the requirement "All PII on the AWS Cloud must be hidden" imposes that masking must be performed on-the-fly, while Macie can be applied to data already in S3. https://aws.amazon.com/blogs/big-data/automate-the-archival-and-deletion-of-sensitive-data-using-amazon-macie/ C - WRONG, encryption != masking D - WRONG, Amazon Comprehend PII API has no integration with KDF
upvoted 11 times
ccpmad
1 year, 9 months ago
"that is stored in the AWS Cloud to be masked" is not on the fly I am still between A and B.
upvoted 2 times
...
...
njraman
Most Recent 1 year, 8 months ago
D : Correct answer and we do have intergration https://aws.amazon.com/blogs/machine-learning/redact-sensitive-data-from-streaming-data-in-near-real-time-using-amazon-comprehend-and-amazon-kinesis-data-firehose/
upvoted 1 times
...
pk349
1 year, 12 months ago
A: I passed the test
upvoted 2 times
...
Jerry84
2 years, 1 month ago
Selected Answer: A
https://aws.amazon.com/blogs/machine-learning/redact-sensitive-data-from-streaming-data-in-near-real-time-using-amazon-comprehend-and-amazon-kinesis-data-firehose/ From the link above, A makes more sense.
upvoted 1 times
...
Ody__
2 years, 3 months ago
Selected Answer: A
https://aws.amazon.com/blogs/machine-learning/protect-pii-using-amazon-s3-object-lambda-to-process-and-modify-data-during-retrieval/
upvoted 2 times
ccpmad
1 year, 9 months ago
Yes it should be A. But they should also write the question better. As "that is stored in the AWS Cloud to be masked" is not clear. Be masked before or could be after stored.
upvoted 2 times
...
...
[Removed]
2 years, 4 months ago
A https://aws.amazon.com/blogs/machine-learning/protect-pii-using-amazon-s3-object-lambda-to-process-and-modify-data-during-retrieval/
upvoted 1 times
...
rocky48
2 years, 4 months ago
Selected Answer: A
A might be the answer. Amazon Comprehend is used for unstructured data.
upvoted 2 times
...
rav009
2 years, 6 months ago
Selected Answer: A
the source is a relational database, so you can get to know which column has PII and need masked. So A. And aws comprehend is for text
upvoted 1 times
...
he11ow0rId
2 years, 7 months ago
Selected Answer: A
Between A and D, don't think Comprehend is invokable by KDF, and shouldn't be used for structured data (at least not efficient), hence A
upvoted 3 times
...
ystotest
2 years, 7 months ago
A Correct. Amazon Comprehend is used for unstructured data. Apparently, not the case here
upvoted 3 times
...
rocky48
2 years, 8 months ago
Selected Answer: D
Selected Answer: D
upvoted 1 times
rocky48
2 years, 4 months ago
Given the use-case, i guess A could be a better option.
upvoted 1 times
...
...
vpatel3701
2 years, 9 months ago
D https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-comprehend-helps-mask-personally-identifiable-information-from-text-documents/
upvoted 1 times
...
Ramshizzle
2 years, 10 months ago
Selected Answer: B
I feel like there is a mistake in this question. Without looking at the answers I would choose to use Amazon Macie. Maybe Answer B was supposed to say Amazon Macie instead of Amazon Made?? Amazon Made is not a real service. If Macie is not an option I would choose A. Because just using encryption is not hiding PII and I don't think it is possible invoke Amazon Comprehend from FireHose.
upvoted 4 times
gndu
1 year, 11 months ago
That's what I was thinking, it should be Amazon MACIE
upvoted 1 times
...
...
siju13
2 years, 11 months ago
A - Kinesis Firehorse invoke lambda
upvoted 1 times
...
mouli15
3 years ago
B - I think we can use aws Maice
upvoted 2 times
...
astalavista1
3 years ago
Selected Answer: D
D - Would go for this as Amazon Comprehend can mask PII - https://docs.aws.amazon.com/comprehend/latest/dg/pii.html
upvoted 2 times
...
CHRIS12722222
3 years ago
I think answer = A Data encryption and masking are not the same thing
upvoted 1 times
CHRIS12722222
2 years, 12 months ago
Changed to D https://medium.com/fernando-pereiro/analyzing-twitter-on-real-time-with-aws-big-data-and-machine-learning-services-1fa888f962cf
upvoted 1 times
Dun6
2 years, 8 months ago
but the comprehend is not in the KDF as D states
upvoted 1 times
...
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago