Google Professional Machine Learning Engineer Question 132
Select 3Google Cloud PlatformYou are designing a machine learning pipeline on Google Cloud to process healthcare data containing Protected Health Information (PHI). The pipeline must ensure compliance with HIPAA while minimizing the risk of exposing sensitive data. Which of the following approaches should you implement?
- A
Use Cloud Data Loss Prevention (DLP) API to identify and redact PHI before storing the data
- B
Store raw PHI data directly in BigQuery without encryption to reduce processing overhead
- C
Encrypt data at rest and in transit using Cloud Key Management Service (KMS)
- D
Ensure that only authorized service accounts and IAM roles have access to the PHI data
- E
Share raw PHI data with external collaborators by exporting it to a public Google Cloud Storage bucket
Show answer and explanation
Correct answers: A, C, D
Explanation
Handling healthcare data containing PHI requires strict adherence to HIPAA regulations. Using tools like Cloud DLP API helps identify and redact sensitive information, while encrypting data and restricting access protects against unauthorized access. Storing raw PHI data without encryption or sharing it publicly violates compliance standards and poses significant security risks.
- A. Correct.
Correct: Using Cloud DLP API is a recommended approach for detecting and redacting sensitive data like PHI, ensuring compliance with data protection regulations such as HIPAA.
- B. Incorrect.
Incorrect: Storing raw PHI data without encryption violates HIPAA guidelines and significantly increases the risk of unauthorized access to sensitive data.
- C. Correct.
Correct: Encrypting data at rest and in transit is a best practice for securing sensitive information such as PHI and is required under HIPAA regulations.
- D. Correct.
Correct: Restricting access to PHI using IAM roles and service accounts ensures that only authorized users or services can access the sensitive data.
- E. Incorrect.
Incorrect: Sharing raw PHI data in a public storage bucket is a severe violation of data privacy regulations like HIPAA and can lead to unauthorized access.