Google Professional Cloud Security Engineer Exam - Topic 4 Question 45 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 45
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You are working with protected health information (PHI) for an electronic health record system. The privacy officer is concerned that sensitive data is stored in the analytics system. You are tasked with anonymizing the sensitive data in a way that is not reversible. Also, the anonymized data should not preserve the character set and length. Which Google Cloud solution should you use?

ACloud Data Loss Prevention with deterministic encryption using AES-SIV

BCloud Data Loss Prevention with format-preserving encryption

CCloud Data Loss Prevention with cryptographic hashing

DCloud Data Loss Prevention with Cloud Key Management Service wrapped cryptographic keys

Show Suggested Answer

Suggested Answer: D

by Luisa at May 06, 2022, 02:13 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shizue

4 months ago

I’m leaning towards D for the key management aspect.

upvoted 0 times

...

Noel

4 months ago

Option B seems risky with format-preserving encryption.

upvoted 0 times

...

Roy

4 months ago

Wait, can hashing really make it non-reversible?

upvoted 0 times

...

Jacki

4 months ago

Totally agree, hashing is a solid way to go!

upvoted 0 times

...

An

5 months ago

I think option C is the best choice for anonymizing data.

upvoted 0 times

...

Yuriko

5 months ago

If I recall correctly, the Cloud Key Management Service is more about managing keys rather than anonymizing data, so I don't think that's the right answer for this question.

upvoted 0 times

...

Shaquana

5 months ago

I’m a bit confused about the differences between deterministic encryption and format-preserving encryption. I thought both could potentially allow for reversibility in some cases.

upvoted 0 times

...

Merilyn

5 months ago

I think we practiced a similar question about data protection methods, and I feel like cryptographic hashing might be the right choice here since it doesn't retain original data characteristics.

upvoted 0 times

...

Jeniffer

5 months ago

I remember we discussed the importance of anonymizing data, but I'm not sure which option completely removes the ability to reverse it.

upvoted 0 times

...

Refugia

5 months ago

I think the answer is C. Structural and functional are the two main testing approaches, while white box and glass box are just different terms for the same thing.

upvoted 0 times

...

Quentin

5 months ago

Okay, let me take a closer look at the information provided in the exhibit. I think I can narrow it down to the correct answer if I analyze the details carefully.

upvoted 0 times

...

Dexter

5 months ago

Okay, let's think this through. The scenario says the host has 2 physical GPUs running NVIDIA GRID technology, so that rules out pass-through GPU. Software-virtualized GPU might work, but it's not optimized for 3D apps. I think the best option here is hardware-virtualized GPU.

upvoted 0 times

...

Ressie

5 months ago

I'm a bit confused on this one. I was leaning towards industry averages, since that could give you a benchmark to work from. But business impact analysis makes sense too, since it's specific to your organization. Guess I'll have to weigh the pros and cons of each option.

upvoted 0 times

...