Examtopics

Professional Cloud Security Engineer

158
160

Topic 1 Question 159
You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on- premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes. Which components should you use in your solution?

2 つ選択
- Secret Manager
- Cloud Key Management Service
- Cloud Data Loss Prevention with cryptographic hashing
- Cloud Data Loss Prevention with automatic text redaction
- Cloud Data Loss Prevention with deterministic encryption using AES-SIV
ユーザの投票
コメント(7)
- 正解だと思う選択肢: BE
  B: you need KMS to store the CryptoKey https://cloud.google.com/dlp/docs/reference/rest/v2/projects.deidentifyTemplates#crypt
  
  E: for the de-identity you need to use CryptoReplaceFfxFpeConfig or CryptoDeterministicConfig https://cloud.google.com/dlp/docs/reference/rest/v2/projects.deidentifyTemplates#cryptodeterministicconfig https://cloud.google.com/dlp/docs/deidentify-sensitive-data
  
  👍 10
  GHOST19852022/09/12
- 正解だと思う選択肢: BE
  BE is the answer.
  
  👍 3
  zellck2022/09/27
- 正解だと思う選択肢: BE
  B. Cloud Key Management Service E. Cloud Data Loss Prevention with deterministic encryption using AES-SIV
  
  👍 2
  AwesomeGCP2022/10/08
シャッフルモード

158
160