ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 71 - DVA-C02 discussion

Report
Export

A developer is incorporating AWS X-Ray into an application that handles personal identifiable information (PII). The application is hosted on Amazon EC2 instances. The application trace messages include encrypted PII and go to Amazon CloudWatch. The developer needs to ensure that no PII goes outside of the EC2 instances.

Which solution will meet these requirements?

A.
Manually instrument the X-Ray SDK in the application code.
Answers
A.
Manually instrument the X-Ray SDK in the application code.
B.
Use the X-Ray auto-instrumentation agent.
Answers
B.
Use the X-Ray auto-instrumentation agent.
C.
Use Amazon Macie to detect and hide PII. Call the X-Ray API from AWS Lambda.
Answers
C.
Use Amazon Macie to detect and hide PII. Call the X-Ray API from AWS Lambda.
D.
Use AWS Distro for Open Telemetry.
Answers
D.
Use AWS Distro for Open Telemetry.
Suggested answer: A

Explanation:

This solution will meet the requirements by allowing the developer to control what data is sent to XRay and CloudWatch from the application code. The developer can filter out any PII from the trace messages before sending them to X-Ray and CloudWatch, ensuring that no PII goes outside of the EC2 instances. Option B is not optimal because it will automatically instrument all incoming and outgoing requests from the application, which may include PII in the trace messages. Option C is not optimal because it will require additional services and costs to use Amazon Macie and AWS Lambda, which may not be able to detect and hide all PII from the trace messages. Option D is not optimal because it will use Open Telemetry instead of X-Ray, which may not be compatible with CloudWatch and other AWS services.

Reference: [AWS X-Ray SDKs]

asked 16/09/2024
long tran
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first