MLA-C01 Question 113
Select 4You are developing a machine learning model to analyze patient health records for a healthcare provider. The dataset contains protected health information (PHI). The healthcare provider also requires that the data remains within a specific region due to local compliance laws on data residency. Which actions should you take to ensure compliance with these requirements while using AWS services?
- A
Use AWS Key Management Service (KMS) to encrypt sensitive data at rest.
- B
Ensure the dataset is stored and processed only in AWS regions that comply with the required data residency regulations.
- C
Grant public access to the dataset in Amazon S3 so that it can be used for collaboration with external researchers.
- D
Use Amazon Macie to detect and classify PHI in the dataset.
- E
Configure Amazon SageMaker to process data only within the selected region.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To meet compliance requirements for PHI and data residency, you must ensure best practices such as data encryption, regional restrictions on data storage and processing, and tools to detect sensitive data. Options 1, 2, 4, and 5 align with these requirements, while option 3 violates fundamental compliance standards by exposing sensitive data.
- A. Correct.
Encrypting sensitive data, such as PHI, at rest using AWS KMS ensures that the data is protected and meets compliance requirements for confidentiality.
- B. Correct.
Storing and processing data only in regions that comply with data residency regulations ensures adherence to local compliance laws.
- C. Incorrect.
Granting public access to sensitive data directly violates compliance requirements and exposes PHI, making it an incorrect and unsafe option.
- D. Correct.
Amazon Macie helps detect and classify PHI, which is critical for ensuring that compliance requirements are being met.
- E. Correct.
Configuring Amazon SageMaker to process data within the selected region ensures that data residency and local compliance laws are followed.