Exam Professional Cloud Security Engineer topic 1 question 124 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 124
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You are working with protected health information (PHI) for an electronic health record system. The privacy officer is concerned that sensitive data is stored in the analytics system. You are tasked with anonymizing the sensitive data in a way that is not reversible. Also, the anonymized data should not preserve the character set and length. Which Google Cloud solution should you use?

A. Cloud Data Loss Prevention with deterministic encryption using AES-SIV
B. Cloud Data Loss Prevention with format-preserving encryption
C. Cloud Data Loss Prevention with cryptographic hashing
D. Cloud Data Loss Prevention with Cloud Key Management Service wrapped cryptographic keys

Show Suggested Answer

Suggested Answer: C 🗳️

by Tabayashi at April 29, 2022, 3:25 a.m.

Comments

Submit Cancel

Tabayashi

Highly Voted 2 years, 7 months ago

Answer is (C). The only option that is irreversible is cryptographic hashing. https://cloud.google.com/dlp/docs/pseudonymization?hl=JA&skip_cache=true#supported-methods

upvoted 20 times

AzureDP900

2 years, 1 month ago

Agreed C is right

upvoted 1 times

...

oezgan

Most Recent 9 months ago

Gemini says: Restricted Endpoints: While restricted.googleapis.com can be used for private access, it's recommended to use private.googleapis.com for newer services and broader compatibility.

upvoted 1 times

...