Google Professional Data Engineer Question 12
Single answerGoogle Cloud PlatformYour company processes sensitive customer data, including personally identifiable information (PII), and stores it in Google Cloud Storage. To comply with privacy regulations, you need to ensure that PII is identified and redacted before storing the data. Which approach should you take using Google Cloud's tools?
- A
Use the Cloud Data Loss Prevention (DLP) API to inspect the data and redact PII before storing it in Google Cloud Storage.
- B
Enable object versioning in Google Cloud Storage to automatically detect and redact PII in stored objects.
- C
Write a custom script using Python to manually parse and redact PII before uploading the data to Google Cloud Storage.
- D
Use the BigQuery Data Masking feature to redact PII in data stored in Cloud Storage.
Show answer and explanation
Correct answer: A
Explanation
The Cloud Data Loss Prevention (DLP) API is a purpose-built tool for identifying and redacting sensitive information such as PII. It allows you to inspect data before storing it in Google Cloud Storage, ensuring compliance with privacy regulations. Other options either do not address the redaction of PII or are not applicable to Cloud Storage.
- A. Correct.
This is the correct approach. The Cloud Data Loss Prevention (DLP) API is specifically designed to inspect, classify, and redact sensitive data, including PII, before storing it in Google Cloud Storage.
- B. Incorrect.
This is incorrect. While enabling object versioning in Google Cloud Storage provides a way to track changes to objects, it does not provide any functionality for detecting or redacting PII.
- C. Incorrect.
This is incorrect. While a custom script could theoretically perform this task, it would be error-prone and less efficient compared to using a purpose-built tool like the Cloud DLP API.
- D. Incorrect.
This is incorrect. BigQuery's Data Masking feature is for masking data within BigQuery tables and does not operate on data stored in Google Cloud Storage.