PROFESSIONAL-CLOUD-ARCHITECT · Question #190
Case Study: 9 - Helicopter Racing League Company overview Helicopter Racing League (HRL) is a global sports league for competitive helicopter racing. Each year HRL holds the world championship and sev
The correct answer is B. Encrypt the card data with a deterministic algorithm stored in Firestore using Datastore mode.. https://cloud.google.com/community/tutorials/pci-tokenizer Deterministic output means that a given set of inputs (card number, expiration, and userID) will always generate the same token. This is useful if you want to rely on the token value to deduplicate your token stores. You
Question
Options
- AStore the card data in Secret Manager after running a query to identify duplicates.
- BEncrypt the card data with a deterministic algorithm stored in Firestore using Datastore mode.
- CEncrypt the card data with a deterministic algorithm and shard it across multiple Memorystore
- DUse column-level encryption to store the data in Cloud SQL.
How the community answered
(62 responses)- A26% (16)
- B55% (34)
- C8% (5)
- D11% (7)
Explanation
https://cloud.google.com/community/tutorials/pci-tokenizer Deterministic output means that a given set of inputs (card number, expiration, and userID) will always generate the same token. This is useful if you want to rely on the token value to deduplicate your token stores. You can simply match a newly generated token to your existing catalog of tokens to determine whether the card has been previously stored. Depending on your application architecture, this can be a very useful feature. However, this could also be accomplished using a salted hash of the input values. https://cloud.google.com/architecture/tokenizing-sensitive-cardholder-data-for-pci-dss Firestore is the next major version of Datastore. Firestore can run in Datastore mode, which uses the same API as Datastore and scales to millions of writes per second,
Topics
Community Discussion
No community discussion yet for this question.