MLA-C01 Question 112
Select 4You are developing a machine learning model to predict patient health outcomes for a healthcare organization. The dataset includes sensitive information such as names, Social Security numbers, and medical history. The organization must comply with HIPAA regulations. Which of the following actions should you take to ensure compliance and protect sensitive information?
- A
Encrypt the dataset at rest and in transit using AWS Key Management Service (KMS).
- B
Anonymize or pseudonymize personally identifiable information (PII) before using the dataset for training.
- C
Store the dataset in an Amazon S3 bucket configured with versioning and public access enabled for easy recovery.
- D
Use Amazon SageMaker to train the model within a Virtual Private Cloud (VPC) to restrict network access.
- E
Ensure the dataset is stored in an AWS Region that complies with data residency requirements.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
When dealing with sensitive data such as PII and PHI, compliance with regulations like HIPAA is essential. Encrypting data, anonymizing or pseudonymizing sensitive fields, restricting network access through a VPC, and adhering to data residency requirements are all necessary actions to ensure compliance. Public access to sensitive data storage, however, is a clear violation of compliance and security best practices.
- A. Correct.
Encrypting data at rest and in transit is critical for protecting sensitive information and ensuring compliance with HIPAA and other regulations.
- B. Correct.
Anonymizing or pseudonymizing PII reduces the risk of exposing sensitive information during model training, which is a key compliance requirement.
- C. Incorrect.
Enabling public access to an S3 bucket containing sensitive data violates security best practices and compliance requirements, making this option incorrect.
- D. Correct.
Using Amazon SageMaker within a VPC ensures that network access to sensitive data is restricted, aligning with compliance and security best practices.
- E. Correct.
Storing data in a compliant AWS Region ensures adherence to data residency requirements, which is critical for regulatory compliance.