Google Exam Professional Cloud Security Engineer Topic 2 Question 60 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 60
Topic #: 2

[All Professional Cloud Security Engineer Questions]

You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on-premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes. Which components should you use in your solution? (Choose two.)

ASecret Manager

BCloud Key Management Service

CCloud Data Loss Prevention with cryptographic hashing

DCloud Data Loss Prevention with automatic text redaction

ECloud Data Loss Prevention with deterministic encryption using AES-SIV

Show Suggested Answer

Suggested Answer: B

https://cloud.google.com/storage/docs/public-access-prevention

Public access prevention protects Cloud Storage buckets and objects from being accidentally exposed to the public. If your bucket is contained within an organization, you can enforce public access prevention by using the organization policy constraint storage.publicAccessPrevention at the project, folder, or organization level.

by Felix at Feb 05, 2023, 03:14 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ressie

1 months ago

Wait, we're supposed to choose two options? I was just gonna go with the first one that sounded the most techno-babble-y.

upvoted 0 times

...

Bettina

1 months ago

Samantha

upvoted 0 times

Dominga

11 days ago

B) Cloud Key Management Service and D) Cloud Data Loss Prevention with automatic text redaction

upvoted 0 times

...

Keneth

15 days ago

A) Secret Manager and C) Cloud Data Loss Prevention with cryptographic hashing

upvoted 0 times

...

Gianna

1 months ago

Well, this is a no-brainer. I'm picking C and D all the way. Automatic text redaction is the way to go!

upvoted 0 times

...

Muriel

2 months ago

Alright, time to put on my security hat. I'm leaning towards C and E - gotta keep that PII under lock and key, you know?

upvoted 0 times

Izetta

12 days ago

E) Cloud Data Loss Prevention with deterministic encryption using AES-SIV is a strong choice for re-identifying the data.

upvoted 0 times

...

Mozelle

15 days ago

C) Cloud Data Loss Prevention with cryptographic hashing is a must for protecting PII.

upvoted 0 times

...

Erasmo

19 days ago

A) Secret Manager sounds like a good option for securing the data.

upvoted 0 times

...

Jerry

2 months ago

Ooh, this is a good one! I think I'd use both Cloud Data Loss Prevention and Secret Manager to really lock down that sensitive data.

upvoted 0 times

Santos

8 days ago

Combining both components will ensure the data is protected and can still be used for analytics purposes.

upvoted 0 times

...

Eliz

10 days ago

Secret Manager can securely store and manage API keys, passwords, certificates, and other sensitive data.

upvoted 0 times

...

Brice

20 days ago

I agree, using Cloud Data Loss Prevention with cryptographic hashing will help obfuscate the PII.

upvoted 0 times

...

Salena

2 months ago

Hmm, this seems like a tricky one. I'd definitely go with Cloud Data Loss Prevention, but I'm not sure if I should choose the cryptographic hashing or the deterministic encryption option.

upvoted 0 times

Nadine

2 months ago

Perfect, that should provide a secure solution for handling the PII in your Google Cloud environment.

upvoted 0 times

...

Georgeanna

2 months ago

Great idea! With those two components, you should be able to redact and re-identify the sensitive data.

upvoted 0 times

...

Phil

2 months ago

That's a good choice. I would also suggest using Cloud Data Loss Prevention with automatic text redaction.

upvoted 0 times

...

Kerry

2 months ago

I think you should go with Cloud Data Loss Prevention with deterministic encryption using AES-SIV.

upvoted 0 times

...

Richelle

2 months ago

I'm not sure about using Cloud Data Loss Prevention with automatic text redaction. It might not be the best option for this scenario.

upvoted 0 times

...

Zona

3 months ago

I agree with Billy. We can also use Cloud Data Loss Prevention with deterministic encryption using AES-SIV to re-identify the data for analytics purposes.

upvoted 0 times

...

Billy

3 months ago

I think we should use Cloud Data Loss Prevention with cryptographic hashing to obfuscate the PII.

upvoted 0 times

...