Task 3: Manage Sensitive Data in Application Code DVA-C02 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A developer is designing a healthcare application that will store patient medical records. Which data classification category applies to this data, and what is a key implication for handling it?

   • APII; the data must be encrypted at rest and in transit.
   • BPHI; the data can be stored in any AWS region without restriction.
   • CPHI; the data is subject to specific regulatory requirements such as HIPAA.
   • DPII; the data must be deleted after 30 days.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A developer is building a REST API that handles user profile updates. The API logs all incoming requests for troubleshooting. A user reports that their social security number (SSN) appeared in the logs. What is the most effective way to prevent this from happening again?

   • AInstruct the user to avoid entering their SSN in the future.
   • BAdd a filter in the logging framework to redact any field named 'ssn' or 'socialSecurityNumber' from the log output.
   • CEncrypt the log files in CloudWatch Logs using AWS KMS.
   • DDisable logging for the API endpoint that handles profile updates.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A developer is working on a web application that collects user email addresses for marketing purposes. The application also has a feature that allows users to see their own purchase history. The developer is writing logs for the purchase history feature. Which data should be considered sensitive and require special handling in the logs?

   • AThe user's IP address, because it is always considered highly sensitive PHI.
   • BThe date and time of the purchase, because it reveals user behavior.
   • CThe user's email address, because it is considered PII and should be redacted or masked in logs.
   • DThe product names the user purchased, because they reveal personal preferences.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which design pattern is commonly used to enforce tenant isolation in a multi-tenant application that uses a shared database?

   • AStoring all tenant data in a single table without any tenant identifier.
   • BUsing a global secondary index on the table.
   • CIncluding a tenant ID in every database query and enforcing it with application logic.
   • DEncrypting the entire database with a single KMS key.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A developer is building a Lambda function that needs to access a third-party API. The API key is stored in AWS Secrets Manager. The Lambda function is invoked frequently. What is the best practice for retrieving the secret to minimize cost and latency?

   • AStore the API key in the Lambda environment variable instead of Secrets Manager.
   • BRetrieve the secret from Secrets Manager on every Lambda invocation.
   • CUse AWS Systems Manager Parameter Store instead of Secrets Manager for lower cost.
   • DCache the secret in a global variable outside the Lambda handler and refresh it periodically.
   Reveal Solution Discussion Select an answer first