Google Exam Professional Cloud Security Engineer Topic 2 Question 60 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 60
Topic #: 2

[All Professional Cloud Security Engineer Questions]

You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on-premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes. Which components should you use in your solution? (Choose two.)

ASecret Manager

BCloud Key Management Service

CCloud Data Loss Prevention with cryptographic hashing

DCloud Data Loss Prevention with automatic text redaction

ECloud Data Loss Prevention with deterministic encryption using AES-SIV

Show Suggested Answer

Suggested Answer: B

https://cloud.google.com/storage/docs/public-access-prevention

Public access prevention protects Cloud Storage buckets and objects from being accidentally exposed to the public. If your bucket is contained within an organization, you can enforce public access prevention by using the organization policy constraint storage.publicAccessPrevention at the project, folder, or organization level.

by Felix at Feb 05, 2023, 03:14 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jerry

12 hours ago

Ooh, this is a good one! I think I'd use both Cloud Data Loss Prevention and Secret Manager to really lock down that sensitive data.

upvoted 0 times

...

25 days ago

I think we should use Cloud Data Loss Prevention with cryptographic hashing to obfuscate the PII.

upvoted 0 times

...