DEA-C01 · Question #190
A company saves customer data to an Amazon S3 bucket. The company uses server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the bucket. The dataset includes personally identifiable informatio
Sign in or unlock DEA-C01 to reveal the answer and full explanation for question #190. The question stem and answer options stay visible for context.
Question
A company saves customer data to an Amazon S3 bucket. The company uses server-side encryption with AWS KMS keys (SSE-KMS) to encrypt the bucket. The dataset includes personally identifiable information (PII) such as social security numbers and account details. Data that is tagged as PII must be masked before the company uses customer data for analysis. Some users must have secure access to the PII data during the pre-processing phase. The company needs a low-maintenance solution to mask and secure the PII data throughout the entire engineering pipeline. Which combination of solutions will meet these requirements? (Choose two.)
Options
- AUse AWS Glue DataBrew to perform extract, transform, and load (ETL) tasks that mask the PII
- BUse Amazon GuardDuty to monitor access patterns for the PII data that is used in the
- CConfigure an Amazon Macie discovery job for the S3 bucket.
- DUse AWS Identity and Access Management (IAM) to manage permissions and to control access
- EWrite custom scripts in an application to mask the PII data and to control access.
Unlock DEA-C01 to see the answer
You've previewed enough free DEA-C01 questions. Unlock DEA-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.