nerdexam
Amazon

DBS-C01 · Question #349

A company performs an audit on various data stores and discovers that an Amazon S3 bucket is storing a credit card number. The S3 bucket is the target of an AWS Database Migration Service (AWS DMS)…

The correct answer is A. Add a transformation rule to the DMS task to ignore the column from the source data endpoint. https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Tasks.CustomizingTasks.TableMappi ng.SelectionTransformation.Transformations.html

Submitted by hans_de· Mar 6, 2026Deployment and Migration

Question

A company performs an audit on various data stores and discovers that an Amazon S3 bucket is storing a credit card number. The S3 bucket is the target of an AWS Database Migration Service (AWS DMS) continuous replication task that uses change data capture (CDC). The company determines that this field is not needed by anyone who uses the target data. The company has manually removed the existing credit card data from the S3 bucket. What is the MOST operationally efficient way to prevent new credit card data from being written to the S3 bucket?

Options

  • AAdd a transformation rule to the DMS task to ignore the column from the source data endpoint.
  • BAdd a transformation rule to the DMS task to mask the column by using a simple SQL query.
  • CConfigure the target S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS).
  • DRemove the credit card number column from the data source so that the DMS task does not need

How the community answered

(30 responses)
  • A
    80% (24)
  • B
    10% (3)
  • C
    7% (2)
  • D
    3% (1)

Explanation

https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Tasks.CustomizingTasks.TableMappi ng.SelectionTransformation.Transformations.html

Topics

#AWS DMS#data migration#CDC#transformation rules#sensitive data

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DBS-C01 Practice