DEA-C01 Question 208
Select 3A company is building a data lake on AWS to store and analyze vast amounts of customer data, including personally identifiable information (PII), financial transactions, and system logs. To comply with regulatory requirements, the company needs to classify its data and apply the appropriate security controls. Which of the following approaches should the data engineer take to classify the data effectively in this scenario?
- A
Use Amazon Macie to automatically discover and classify sensitive data such as PII in the data lake.
- B
Manually review all data files in the data lake and tag them based on their content.
- C
Implement a tagging strategy to label datasets with metadata such as sensitivity levels and regulatory requirements.
- D
Use AWS Glue Data Catalog to organize and classify datasets with appropriate tags.
- E
Encrypt all data in the data lake without classifying it, as encryption alone ensures compliance.
Show answer and explanation
Correct answers: A, C, D
Explanation
Effective data classification in a data lake requires a combination of automated tools and metadata tagging to identify sensitive information and apply appropriate controls. Amazon Macie provides automated discovery and classification of sensitive data such as PII, while AWS Glue Data Catalog and tagging strategies enable the organization and classification of datasets. Encryption is essential for securing data, but it does not address the need for classification to meet compliance requirements.
- A. Correct.
Amazon Macie is a managed service designed to discover and classify sensitive data such as PII, making it an essential tool for automated data classification in the data lake.
- B. Incorrect.
Manually reviewing data files is highly inefficient and error-prone, especially when dealing with large-scale datasets in a data lake.
- C. Correct.
A tagging strategy is critical to label datasets with metadata like sensitivity levels and regulatory requirements, enabling the application of appropriate controls.
- D. Correct.
AWS Glue Data Catalog can be used to organize and classify datasets with metadata tags, supporting effective data classification and management.
- E. Incorrect.
While encryption is important for securing data, it does not replace the need for classifying data to meet regulatory and organizational requirements.