nerdexam
Amazon

DVA-C02 · Question #711

A company builds a web application that allows employees to submit an employee survey after business travel events. The web application sends a notification to an Amazon SNS topic. A third- party appl

The correct answer is D. Configure a data protection policy for the SNS topic. Use SNS managed data identifiers to deny. Using SNS managed data identifiers with data protection policies allows detection and blocking of sensitive data patterns like employee IDs automatically with minimal development effort, directly integrated with SNS. This prevents sensitive data from being sent in notifications w

Submitted by kim_seoul· Mar 5, 2026Security

Question

A company builds a web application that allows employees to submit an employee survey after business travel events. The web application sends a notification to an Amazon SNS topic. A third- party application is subscribed to the SNS topic. The company has instructed employees to not add the employee IDs to survey responses to protect personal information. However, during an audit of the survey data, the company notices that some employees have added employee IDs to the survey responses. The company wants to prevent employees from adding employee IDs to the survey responses. Which solution will meet this requirement with LEAST development effort?

Options

  • AUpdate the application code to submit the survey to an Amazon S3 bucket. Use Amazon Macie to
  • BCreate an AWS Lambda function. Subscribe the function to the SNS topic. Configure the Lambda
  • CConfigure a data protection policy for the SNS topic. Configure the policy to use regular
  • DConfigure a data protection policy for the SNS topic. Use SNS managed data identifiers to deny

How the community answered

(27 responses)
  • A
    15% (4)
  • B
    7% (2)
  • C
    4% (1)
  • D
    74% (20)

Explanation

Using SNS managed data identifiers with data protection policies allows detection and blocking of sensitive data patterns like employee IDs automatically with minimal development effort, directly integrated with SNS. This prevents sensitive data from being sent in notifications without needing

Community Discussion

No community discussion yet for this question.

Full DVA-C02 Practice