ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 27 - DAS-C01 discussion

Report
Export

A company stores its sales and marketing data that includes personally identifiable information (PII) in Amazon S3. The company allows its analysts to launch their own Amazon EMR cluster and run analytics reports with the data. To meet compliance requirements, the company must ensure the data is not publicly accessible throughout this process. A data engineer has secured Amazon S3 but must ensure the individual EMR clusters created by the analysts are not exposed to the public internet.

Which solution should the data engineer to meet this compliance requirement with LEAST amount of effort?

A.
Create an EMR security configuration and ensure the security configuration is associated with the EMR clusters when they are created.
Answers
A.
Create an EMR security configuration and ensure the security configuration is associated with the EMR clusters when they are created.
B.
Check the security group of the EMR clusters regularly to ensure it does not allow inbound traffic from IPv4 0.0.0.0/0 or IPv6 ::/0.
Answers
B.
Check the security group of the EMR clusters regularly to ensure it does not allow inbound traffic from IPv4 0.0.0.0/0 or IPv6 ::/0.
C.
Enable the block public access setting for Amazon EMR at the account level before any EMR cluster is created.
Answers
C.
Enable the block public access setting for Amazon EMR at the account level before any EMR cluster is created.
D.
Use AWS WAF to block public internet access to the EMR clusters across the board.
Answers
D.
Use AWS WAF to block public internet access to the EMR clusters across the board.
Suggested answer: B

Explanation:


Reference: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-security-groups.html

asked 16/09/2024
Alberto Castillo
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first