MLA-C02 practice question: Masking and redacting data

Data Preparation for ML and AI A free question from our original MLA-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

A regional bank records customer service calls and turns the transcripts into text for a fine-tuning dataset. The transcripts contain names, account numbers and home addresses that must not reach the training data or the model.

The team needs a pipeline that finds this personal information in each transcript, replaces it with placeholders, and stores the redacted text where only the data team can read it. The bank's security policy requires encryption at rest with a customer managed key.

Which TWO actions meet these requirements? (Choose two.)

Choose two answers.

A. Run Amazon Macie on the transcript bucket and rely on its findings report to decide which transcripts to delete.
B. Call the Amazon Comprehend PII detection API from the processing step for each transcript, and replace each detected entity with its type label before writing the text.
C. Store the redacted transcripts in an S3 bucket encrypted with the AWS managed key, which is the default for all buckets.
D. Store the redacted transcripts in an S3 bucket encrypted with an AWS KMS customer managed key, and restrict the bucket policy to the data team's role.
E. Use Amazon Rekognition to detect faces and names in the transcript images and blur them before training.

Show the answer and explanation

Answers: B, D

A. Wrong: Macie discovers sensitive data in S3 buckets and reports findings, but it does not redact the text inside each transcript. Deleting whole transcripts would throw away the useful conversation.
B. Right: Correct. Amazon Comprehend detects personally identifiable information in text and returns entity offsets, which the pipeline can use to replace the values with placeholders. The redacted text is then safe to use for training. Learn more: Personally identifiable information (PII) in Amazon Comprehend (opens in a new tab)
C. Wrong: The stem asks for a customer managed key. The AWS managed key is a valid encryption option, but it does not meet this policy.
D. Right: Correct. A customer managed key meets the encryption requirement, and a bucket policy limited to the data team restricts who can read the redacted text. Together with the redaction step, both parts of the policy are covered. Learn more: Protecting data using server-side encryption with KMS keys (opens in a new tab)
E. Wrong: Rekognition analyzes images and video, while these transcripts are text. The option does not address the text fields the stem describes.

Explanation

Amazon Comprehend finds personal information in text, so the pipeline can replace it before training. A customer managed KMS key and a restrictive bucket policy satisfy the encryption and access requirements. Macie reports sensitive data without redacting it, and Rekognition works on images.

MLA-C02 practice question: Masking and redacting data

Explanation

Study

Keep practicing