Google Professional Cloud Security Engineer Exam - Topic 4 Question 96 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 96
Topic #: 4

[All Professional Cloud Security Engineer Questions]

When working with agents in a support center via online chat, an organization's customers often share pictures of their documents with personally identifiable information (PII). The organization that owns the support center is concerned that the PII is being stored in their databases as part of the regular chat logs they retain for

review by internal or external analysts for customer service trend analysis.

Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?

AUse Cloud Key Management Service (KMS) to encrypt the PII data shared by customers before storing it for analysis.

BUse Object Lifecycle Management to make sure that all chat records with PII in them are discarded and not saved for analysis.

CUse the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.

DUse the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Show Suggested Answer

Suggested Answer: A, C

https://cloud.google.com/architecture/framework/security/data-residency-sovereignty#manage_your_operational_sovereignty

by Elenora at Jan 14, 2025, 04:14 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Suzan

4 months ago

Not sure if encryption alone (option A) is enough for PII protection.

upvoted 0 times

...

Brice

5 months ago

Wait, can DLP really handle images effectively?

upvoted 0 times

...

Nenita

5 months ago

Discarding records (option B) seems too extreme.

upvoted 0 times

...

Rima

5 months ago

Agree, DLP API is solid for this!

upvoted 0 times

...

Yuette

5 months ago

I think option C is the best choice for redacting PII.

upvoted 0 times

...

Francisca

6 months ago

Object Lifecycle Management seems too extreme; we still need some data for analysis, right? I lean towards the DLP API options.

upvoted 0 times

...

Dell

6 months ago

I feel like encrypting with KMS could be a solution, but it might not address the immediate concern of PII visibility in images.

upvoted 0 times

...

Milly

6 months ago

I think using the DLP API for redaction sounds familiar, especially since we practiced a similar question about handling sensitive data.

upvoted 0 times

...

Kanisha

6 months ago

I remember studying about the DLP API and its capabilities, but I'm not sure if it can handle images directly.

upvoted 0 times

...

Dahlia

6 months ago

The DLP API redaction options sound promising. I'll need to look into how that works in more detail, but it seems like the best balance between protecting PII and maintaining the data's utility.

upvoted 0 times

...

Arthur

6 months ago

Discarding all the chat records with PII seems like it would be a big loss of data that could be useful for their analysis. I'd try to find a way to keep the data while protecting the sensitive information.

upvoted 0 times

...

Lakeesha

6 months ago

I'm a bit confused on the differences between the DLP API and KMS. Encrypting the data with KMS could work, but I'm not sure if that would still allow for the analysis they need to do.

upvoted 0 times

...

Mattie

6 months ago

This seems like a straightforward data privacy question. I think the DLP API solution to redact PII from the images and text would be the best approach.

upvoted 0 times

...

Brianne

11 months ago

I'd go with option C. Redacting the PII from the images before storing them is a surgical strike to protect customer data while keeping the analysis relevant.

upvoted 0 times

...

Lorrine

11 months ago

Option B, baby! Burn it all down! No more PII, no more problems. Just ashes and the sweet, sweet sound of customer service silence.

upvoted 0 times

Vanda

9 months ago

B) Use Object Lifecycle Management to make sure that all chat records with PII in them are discarded and not saved for analysis.

upvoted 0 times

...

Carmelina

10 months ago

C) Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.

upvoted 0 times

...

Natalie

10 months ago

A) Use Cloud Key Management Service (KMS) to encrypt the PII data shared by customers before storing it for analysis.

upvoted 0 times

...

Rashad

11 months ago

Hmm, option D looks good too. Redacting the PII from the text before storing it could work. But I'm leaning towards option C since it's specifically for images, which is what the question is asking about.

upvoted 0 times

Colby

10 months ago

I see your point, but I still think option D could also be effective for redacting PII from text data before storing it.

upvoted 0 times

...

Elenor

10 months ago

Yeah, I agree. Option C seems like the most appropriate solution for handling images with PII.

upvoted 0 times

...

Elouise

11 months ago

I think option C is the best choice. It specifically addresses the concern of redacting PII from images.

upvoted 0 times

...

Dominga

11 months ago

Encrypt the PII data? That's like putting a lock on a locked door. Option C is the clear winner here. Redacting the PII from the images is the way to go.

upvoted 0 times

Marisha

10 months ago

Absolutely, customer trust is crucial. Redacting PII from images before storing them for analysis shows a commitment to data security.

upvoted 0 times

...

Tequila

10 months ago

I agree, it's important to prioritize customer privacy. Using the image inspection and redaction actions of the DLP API is a smart solution.

upvoted 0 times

...

Kathrine

10 months ago

Option C is definitely the best choice. Redacting the PII from the images is the most secure way to protect customer data.

upvoted 0 times

...

Dong

12 months ago

I prefer using the image inspection and redaction actions of the DLP API to redact PII from the images before storing them. It's more secure.

upvoted 0 times

...

Lemuel

12 months ago

I agree with Gwen, encrypting the data will help protect customer information while still allowing for analysis.

upvoted 0 times

...

Elise

12 months ago

Option B seems too extreme. Discarding all the chat records with PII would mean losing valuable data that could be useful for customer service analysis. I prefer a more balanced approach like option C.

upvoted 0 times

Wenona

11 months ago

Option C sounds like a good compromise. We can redact the PII from the images before storing them for analysis.

upvoted 0 times

...

Kenneth

11 months ago

I agree, option B does seem extreme. We need to find a way to protect the PII without losing valuable data for analysis.

upvoted 0 times

...

Gwen

1 year ago

I think we should use Cloud Key Management Service (KMS) to encrypt the PII data before storing it.

upvoted 0 times

...

Johanna

1 year ago

I think option C is the way to go. Using the DLP API to redact the PII from the images before storing them is the most effective solution to protect customer data while still maintaining the utility of the chat logs for analysis.

upvoted 0 times