Task 3: Manage Sensitive Data in Application Code DVA-C02 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A developer is building a feature that shows a user's recent orders. The data includes the user's full name, shipping address, and order total. The developer is displaying this on a screen that could be viewed by others in a shared office. What is the most appropriate way to handle the shipping address?

   • ADo not display the shipping address at all and only show the order total.
   • BMask the shipping address by showing only the city and postal code, with a button to reveal the full address if needed.
   • CDisplay the full shipping address because it is necessary for the user to verify their order.
   • DEncrypt the shipping address in the database and decrypt it only when the user is logged in.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which technique is commonly used to sanitize sensitive data in application output, such as API responses?

   • ACompressing the output to hide the data.
   • BRemoving or replacing sensitive fields with placeholder values.
   • CIncreasing the output verbosity.
   • DBase64-encoding the output.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a key benefit of using AWS Secrets Manager over storing secrets in plaintext configuration files?

   • AIt allows secrets to be stored in plaintext for easier debugging.
   • BIt provides automatic encryption of secrets at rest and in transit.
   • CIt automatically deploys secrets to all EC2 instances.
   • DIt eliminates the need for IAM permissions.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A developer is adding logging to an application that processes credit card numbers. What is the best technique to prevent sensitive data from appearing in logs?

   • AUse a longer log retention period.
   • BEncrypt the log files with AWS KMS.
   • CRedact or mask the sensitive fields before writing to the log.
   • DStore logs in a private S3 bucket.
   Reveal Solution Discussion Select an answer first
6. 5application · hard

   A developer is designing a multi-tenant SaaS application where each tenant has its own data stored in a shared Amazon DynamoDB table. The application uses AWS Lambda and Amazon API Gateway. What is the most secure way to ensure that a tenant can only access their own data?

   • AInclude the tenant ID in the partition key and rely on the application code to filter results based on the authenticated user's tenant ID.
   • BUse a combination of a tenant-specific DynamoDB table and IAM policies to restrict access to that table for each tenant's IAM role.
   • CStore all tenant data in a single table and use a global secondary index on the tenant ID for queries.
   • DEncrypt the entire DynamoDB table with a single AWS KMS key and share the key with all tenants.
   Reveal Solution Discussion Select an answer first