Google Professional Machine Learning Engineer Question 130
Select 3Google Cloud PlatformYou are designing a machine learning pipeline on Google Cloud that processes healthcare data containing protected health information (PHI). The pipeline involves preprocessing, training, and serving a model. Which actions should you take to ensure compliance with privacy regulations such as HIPAA and protect PHI throughout the pipeline?
- A
Enable encryption for data at rest and in transit across all components of the pipeline.
- B
Implement Google Cloud's Data Loss Prevention (DLP) API to de-identify sensitive data before processing.
- C
Disable audit logging to reduce storage cost since logs may contain sensitive information.
- D
Restrict access to the pipeline and its data using Identity and Access Management (IAM) roles.
- E
Store PHI in a public Cloud Storage bucket for easy access by all team members.
Show answer and explanation
Correct answers: A, B, D
Explanation
Handling PHI requires strict adherence to security and compliance standards, such as those outlined in HIPAA. Encrypting data at rest and in transit, de-identifying sensitive data, and implementing robust access controls are essential steps to ensure data protection. Disabling audit logging or exposing PHI in public buckets violates these standards and puts sensitive information at risk.
- A. Correct.
Correct: Encrypting data at rest and in transit is a fundamental security practice to protect PHI and ensure compliance with privacy regulations like HIPAA.
- B. Correct.
Correct: The DLP API is specifically designed to identify and de-identify sensitive information, such as PHI, making it a critical part of processing sensitive data.
- C. Incorrect.
Incorrect: Disabling audit logging is not a best practice. Audit logs are essential for tracking access and changes to sensitive data, which is a key compliance requirement.
- D. Correct.
Correct: Restricting access to data and resources using IAM roles ensures that only authorized users and services can access PHI.
- E. Incorrect.
Incorrect: Storing PHI in a public bucket violates security best practices and privacy regulations, as it exposes sensitive data to unauthorized access.