Exam Professional Cloud Architect All Questions

View all questions & answers for the Professional Cloud Architect exam

Exam Professional Cloud Architect topic 1 question 41 discussion

Actual exam question from Google's Professional Cloud Architect

Question #: 41
Topic #: 1

[All Professional Cloud Architect Questions]

Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis. What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?

A. Hash all data using SHA256
B. Encrypt all data using elliptic curve cryptography
C. De-identify the data with the Cloud Data Loss Prevention API
D. Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers

Show Suggested Answer

Suggested Answer: C 🗳️

by AWS56 at Jan. 12, 2020, 1:02 p.m.

Comments

Submit Cancel

AWS56

Highly Voted 5 years, 5 months ago

C is the answer

upvoted 23 times

nitinz

4 years, 3 months ago

C, data sanitization = DLP

upvoted 8 times

...

tartar

4 years, 10 months ago

C is ok

upvoted 8 times

...

omermahgoub

Highly Voted 2 years, 5 months ago

The recommended approach for sanitizing data of personally identifiable information or payment card information before storing it in Cloud Bigtable is option C: De-identify the data with the Cloud Data Loss Prevention API. The Cloud Data Loss Prevention (DLP) API is a powerful tool that allows you to automatically discover, classify, and redact sensitive data in your organization. It uses advanced machine learning techniques to accurately identify and protect a wide range of sensitive data types, including personal information such as names, addresses, phone numbers, and payment card information. Using the DLP API to de-identify your data before storing it in Cloud Bigtable is the most effective way to ensure that sensitive information is protected and not accessible to unauthorized users.

upvoted 15 times

omermahgoub

2 years, 5 months ago

Option A: Hashing data using SHA256 is not sufficient for protecting sensitive information, as hashes can be reversed using various techniques. Option B: Encrypting data using elliptic curve cryptography is a good option for protecting data, but it requires that you have a secure way to store and manage the encryption keys. If the keys are lost or compromised, the data will be inaccessible. Option D: Using regular expressions to find and redact phone numbers, email addresses, and credit card numbers can be effective in some cases, but it requires that you have a complete and up-to-date list of all the data patterns that you want to protect. It is also prone to errors and may not be able to detect all instances of sensitive data.

upvoted 3 times

Kiroo

2 years, 1 month ago

About D, usually is recommended that you don´t reinvent the wheel specially when talking about security .

upvoted 1 times

...

Ekramy_Elnaggar

Most Recent 7 months ago

Selected Answer: C

1. Accurate and comprehensive: The Cloud DLP API is specifically designed to identify and redact sensitive information like PII (personally identifiable information) and payment card data. It uses advanced techniques like machine learning to accurately detect sensitive data, even in complex and unstructured text. 2. Context-aware: DLP understands the context of the data. It can differentiate between a credit card number and a similar-looking sequence of numbers that's not a credit card. This reduces false positives and ensures accurate sanitization. 3. Flexible and customizable: You can configure DLP to detect specific types of sensitive data, define your own detection rules, and choose how to de-identify the data (e.g., redaction, masking, tokenization). 4. Scalable and efficient: DLP can handle large volumes of data and integrates seamlessly with other GCP services like Cloud Storage and BigQuery.

upvoted 3 times

...

sim7243

7 months, 1 week ago

Selected Answer: C

C option

upvoted 1 times

...

Palan

1 year, 9 months ago

Without any doubt C is the right answer as the DLP API is a flexible and robust tool that helps identify sensitive data like credit card numbers, social security numbers, names and other forms of personally identifiable information (PII).

upvoted 1 times

...

shutupbot

2 years, 2 months ago

Cloud Data Loss Prevention API provides obfuscation and de-identification methods like masking and tokenization. Especially for credit card transactions, the card numbers are supposed to be tokenized. Therefore, this API is helpful.

upvoted 1 times

...