Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
A legal organization that handles very sensitive case data is considering moving the data to Google Cloud. One key area of concern is protecting PII data to reduce the risk of individuals being identified through the data.
Which solution should you use to meet this requirement?
A. Set up VPC Service Controls to create a perimeter around the projects with sensitive data.
B. Set up egress firewall rules to limit traffic.
C. use a separate project for sensitive data and limit access to the project using IAM.
D. Use Cloud Data Loss Prevention to classify and protect sensitive data.
Correct Answer: D
- Option A is incorrect. VPC Service Controls enables users to create security perimeters around their google managed resources and control the movement of data across that perimeter.
- Option B is incorrect. Firewall rules cannot be used to reduce the risk of identifying people through PII data.
- Option C is incorrect. This does not reduce the risk of identifying people through PII data.
- Option D is CORRECT. Cloud DLP can redact, classify and de-identify sensitive data, thereby reducing the risk of identifying people through PII data.
Reference:
Comments are closed, but trackbacks and pingbacks are open.