Google Professional Cloud Architect Exam - Topic 7 Question 22 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 22
Topic #: 7

[All Professional Cloud Architect Questions]

You are working at a sports association whose members range in age from 8 to 30. The association collects a large amount of health data, such as sustained injuries. You are storing this data in BigQuery. Current legislation requires you to delete such information upon request of the subject. You want to design a solution that can accommodate such a request. What should you do?

AUse a unique identifier for each individual. Upon a deletion request, delete all rows from BigQuery with this identifier.

BWhen ingesting new data in BigQuery, run the data through the Data Loss Prevention (DLP) API to identify any personal information. As part of the DLP scan, save the result to Data Catalog. Upon a deletion request, query Data Catalog to find the column with personal information.

CCreate a BigQuery view over the table that contains all data. Upon a deletion request, exclude the rows that affect the subject's data from this view. Use this view instead of the source table for all analysis tasks.

DUse a unique identifier for each individual. Upon a deletion request, overwrite the column with the unique identifier with a salted SHA256 of its value.

Show Suggested Answer

Suggested Answer: B

Current legislation requires you to delete 'SUCH' information upon request of the subject. ' So from that point of view the question is not to delete the entire user records but specific data related to personal health data. With DLP you can use InfoTypes and InfoType detectors to specifically scan for those entries and how to act upon them (link https://cloud.google.com/dlp/docs/concepts-infotypes)

https://cloud.google.com/dlp#section-6

by Roxane at May 07, 2022, 02:39 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kati

4 months ago

I like A, but what if IDs get mixed up?

upvoted 0 times

...

Caprice

4 months ago

Overwriting with SHA256? That feels risky, not sure it’s compliant.

upvoted 0 times

...

Kiera

4 months ago

C sounds like a workaround, not a real solution.

upvoted 0 times

...

Emogene

4 months ago

I think B is better, using DLP is more secure!

upvoted 0 times

...

Lennie

5 months ago

Option A seems straightforward, just delete by ID.

upvoted 0 times

...

Gennie

5 months ago

I like option D because it keeps the identifier secure, but I’m unsure if overwriting it with a hash is compliant with the legislation.

upvoted 0 times

...

Novella

5 months ago

I remember practicing a question about data privacy, and option B sounds familiar. Using the DLP API could help identify personal info, but I wonder if it adds too much complexity.

upvoted 0 times

...

Winfred

5 months ago

I think option A makes sense since using a unique identifier seems straightforward for deletion requests, but I'm not sure if it's the most compliant method.

upvoted 0 times

...

Kizzy

5 months ago

Option C seems like a workaround, but I’m not confident it fully meets the legal requirements. Excluding rows in a view might not actually delete the data.

upvoted 0 times

...