Exam Professional-Cloud-Security-Engineer Topic 1 Question 76 Discussion

Actual exam question for Google's Professional-Cloud-Security-Engineer exam
Question #: 76
Topic #: 1
You discovered that sensitive personally identifiable information (PII) is being ingested to your Google Cloud environment in the daily ETL process from an on-premises environment to your BigQuery datasets. You need to redact this data to obfuscate the PII, but need to re-identify it for data analytics purposes. Which components should you use in your solution? (Choose two.)

Suggested Answer: C,E Vote an answer

To handle PII data ingestion and ensure both redaction and re-identification for analytics purposes, you can use Cloud Data Loss Prevention (DLP) with appropriate techniques for masking and encryption.
* Cloud Data Loss Prevention (DLP) with Cryptographic Hashing (C):
* Use Cloud DLP to apply cryptographic hashing to PII data. Hashing transforms the data into a fixed-length string that is not directly readable, providing a layer of obfuscation. This helps in masking the PII while retaining the ability to verify data integrity.
* Cloud Data Loss Prevention (DLP) with Deterministic Encryption using AES-SIV (E):
* Apply deterministic encryption using AES-SIV through Cloud DLP. Deterministic encryption ensures that the same input will always produce the same encrypted output, allowing you to re- identify the PII when necessary. This method enables secure encryption while allowing data re- identification for analytics.
By combining these two approaches, you can effectively mask PII for privacy protection and later re-identify it when required for analysis.
References
* Cloud Data Loss Prevention Documentation
* Data Redaction and Masking Techniques

by Hiram at Feb 21, 2026, 01:11 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10