Task 3: Manage Sensitive Data in Application Code DVA-C02 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   An application displays customer email addresses in a user interface. In a non-production environment, the developer wants to obscure the actual email addresses. What is an appropriate application-level data masking technique?

   • ABase64-encode the email addresses.
   • BReplace the email addresses with fake but realistic-looking values.
   • CDelete the email addresses from the database.
   • DEncrypt the email addresses with a KMS key.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A developer is working on a customer service application. The application displays the customer's full credit card number on the screen. The security team has requested that only the last four digits be displayed to the customer service agent. What is the best way to implement this?

   • AStore only the last four digits of the credit card number in the database.
   • BUse a third-party API to validate the credit card number and return the masked version.
   • CModify the application's presentation layer to format the credit card number and show only the last four digits.
   • DEncrypt the credit card number in the database and decrypt it only when the agent needs to see it.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A developer is building a customer-support dashboard for a healthcare application. The dashboard displays patient names, email addresses, and medical record numbers (MRNs). Support agents need the MRN to look up records in the backend system, but they do not need to see the full patient name. The application stores data in Amazon RDS and uses AWS Lambda for the API layer. What should the developer do to meet the requirement while minimizing changes to the existing data model?

   • AQuery the RDS database directly from the Lambda function and return the full patient record to the dashboard.
   • BCreate a new RDS read replica and grant the support team direct SQL access to query only the MRN column.
   • CStore the patient name in AWS Secrets Manager and retrieve it only when the support agent clicks a 'reveal' button.
   • DModify the Lambda function to retrieve the MRN and return only the MRN to the dashboard, omitting the patient name from the response.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In a user interface, a developer wants to show only the last four digits of a customer's credit card number. What is this an example of?

   • AData encryption
   • BData deletion
   • CData masking
   • DData compression
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A developer is creating a demo environment for a sales application. The demo uses a copy of production data that includes customer names, email addresses, and phone numbers. The developer wants to show the application's functionality without exposing real customer data to the demo audience. What should the developer do?

   • AEncrypt the production data before loading it into the demo environment.
   • BDelete all customer records from the demo database and only show the application's empty state.
   • CUse the production data as-is in the demo environment because it is only for a short presentation.
   • DApply a data masking technique to replace real customer names, emails, and phone numbers with fictional but realistic-looking data.
   Reveal Solution Discussion Select an answer first