MLS-C01 Question 356
Select 3You are building a machine learning pipeline for a healthcare application that processes sensitive patient data. The dataset includes Personally Identifiable Information (PII) and must comply with strict regulations such as HIPAA. The application needs to ensure the data is anonymized while maintaining the ability to train models effectively. Which of the following actions should you take to secure and anonymize the data?
- A
Use AWS Key Management Service (KMS) to encrypt the data at rest and in transit.
- B
Apply differential privacy techniques to anonymize the dataset.
- C
Replace PII fields with hashed values using a secure cryptographic hash function.
- D
Store raw, unencrypted data in Amazon S3 for faster processing during training.
- E
Perform tokenization on PII fields to replace sensitive data with reversible tokens.
Show answer and explanation
Correct answers: A, B, C
Explanation
When handling sensitive data, especially in regulated industries like healthcare, it is critical to secure the data using encryption mechanisms such as AWS KMS. Additionally, anonymization techniques like differential privacy and secure cryptographic hashing help protect PII while retaining utility for machine learning. Storing unencrypted data or relying on reversible methods like tokenization can compromise data privacy and violate compliance requirements.
- A. Correct.
Correct: Encrypting data at rest and in transit using AWS KMS ensures the data is secure and meets compliance requirements for sensitive information.
- B. Correct.
Correct: Differential privacy is a robust anonymization technique that ensures privacy while allowing the use of the dataset for machine learning purposes.
- C. Correct.
Correct: Hashing PII fields with a cryptographic hash function is a common anonymization approach that protects sensitive information while retaining some utility for analysis.
- D. Incorrect.
Incorrect: Storing raw, unencrypted data in Amazon S3 violates security best practices and compliance requirements for sensitive data.
- E. Incorrect.
Incorrect: While tokenization replaces sensitive data with tokens, it is a reversible process and may not fully anonymize the data in the context of strict privacy standards.