Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Exam Professional Cloud Security Engineer Topic 2 Question 60 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 60
Topic #: 2
[All Professional Cloud Security Engineer Questions]

You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on-premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes. Which components should you use in your solution? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B

https://cloud.google.com/storage/docs/public-access-prevention

Public access prevention protects Cloud Storage buckets and objects from being accidentally exposed to the public. If your bucket is contained within an organization, you can enforce public access prevention by using the organization policy constraint storage.publicAccessPrevention at the project, folder, or organization level.


by Felix at Feb 05, 2023, 03:14 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Ressie
22 days ago
Wait, we're supposed to choose two options? I was just gonna go with the first one that sounded the most techno-babble-y.
upvoted 0 times
...
Bettina
23 days ago
Samantha
upvoted 0 times
...
Gianna
27 days ago
Well, this is a no-brainer. I'm picking C and D all the way. Automatic text redaction is the way to go!
upvoted 0 times
...
Muriel
1 months ago
Alright, time to put on my security hat. I'm leaning towards C and E - gotta keep that PII under lock and key, you know?
upvoted 0 times
Erasmo
2 days ago
A) Secret Manager sounds like a good option for securing the data.
upvoted 0 times
...
...
Jerry
1 months ago
Ooh, this is a good one! I think I'd use both Cloud Data Loss Prevention and Secret Manager to really lock down that sensitive data.
upvoted 0 times
Brice
3 days ago
I agree, using Cloud Data Loss Prevention with cryptographic hashing will help obfuscate the PII.
upvoted 0 times
...
...
Salena
2 months ago
Hmm, this seems like a tricky one. I'd definitely go with Cloud Data Loss Prevention, but I'm not sure if I should choose the cryptographic hashing or the deterministic encryption option.
upvoted 0 times
Nadine
28 days ago
Perfect, that should provide a secure solution for handling the PII in your Google Cloud environment.
upvoted 0 times
...
Georgeanna
1 months ago
Great idea! With those two components, you should be able to redact and re-identify the sensitive data.
upvoted 0 times
...
Phil
1 months ago
That's a good choice. I would also suggest using Cloud Data Loss Prevention with automatic text redaction.
upvoted 0 times
...
Kerry
1 months ago
I think you should go with Cloud Data Loss Prevention with deterministic encryption using AES-SIV.
upvoted 0 times
...
...
Richelle
2 months ago
I'm not sure about using Cloud Data Loss Prevention with automatic text redaction. It might not be the best option for this scenario.
upvoted 0 times
...
Zona
2 months ago
I agree with Billy. We can also use Cloud Data Loss Prevention with deterministic encryption using AES-SIV to re-identify the data for analytics purposes.
upvoted 0 times
...
Billy
2 months ago
I think we should use Cloud Data Loss Prevention with cryptographic hashing to obfuscate the PII.
upvoted 0 times
...

Save Cancel