Google Professional Data Engineer Question 10
Single answerGoogle Cloud PlatformYour organization stores sensitive customer data, including personally identifiable information (PII), in Google Cloud Storage. To ensure compliance with data privacy regulations, you have been tasked with identifying and redacting sensitive information from these files. Which approach would best meet this requirement using Google Cloud tools?
- A
Use the Cloud Data Loss Prevention (DLP) API to scan and redact sensitive information from the files.
- B
Enable encryption on the Cloud Storage bucket to automatically redact sensitive information.
- C
Use Cloud Pub/Sub to identify and redact sensitive information in real-time.
- D
Manually review and redact sensitive information from the files before uploading them to Cloud Storage.
Show answer and explanation
Correct answer: A
Explanation
The Cloud Data Loss Prevention (DLP) API is a purpose-built tool for detecting and managing sensitive data, including PII, in Google Cloud. It provides advanced capabilities to scan data in storage, identify sensitive elements, and take actions such as redaction or masking. This makes it the most appropriate solution for the scenario compared to other options.
- A. Correct.
Correct. The Cloud Data Loss Prevention (DLP) API is specifically designed to detect, classify, and optionally redact sensitive information, such as PII, from structured and unstructured data stored in Google Cloud.
- B. Incorrect.
Incorrect. Encryption ensures data security during storage and transmission but does not identify or redact sensitive information from the files.
- C. Incorrect.
Incorrect. Cloud Pub/Sub is a messaging service and does not have any built-in capabilities to identify or redact sensitive information.
- D. Incorrect.
Incorrect. Manual review is not scalable, prone to errors, and inefficient, especially when dealing with large amounts of data.