Your organization's Customers must scan and upload the contract and their driver license into a web portal in Cloud Storage. You must remove all personally identifiable information (PII) from files…

Question

Options

• ASet a time to live (TTL) of 12 months for the files in the Cloud Storage bucket that removes PII
• BCreate a Cloud Data loss Prevention (DLP) inspection job that de-identifies PII in files created
• CConfigure the Autoclass feature of the Cloud Storage bucket to de-identify PII. Archive the files
• DSchedule a Cloud Key Management Service (KMS) rotation period of 12 months for the

• A
  14% (6)
• B
  76% (32)
• C
  7% (3)
• D
  2% (1)

Explanation

Cloud Data Loss Prevention (DLP) is the purpose-built Google Cloud service for detecting and de-identifying PII. You can create a DLP inspection and de-identification job that scans Cloud Storage objects, targets files older than 12 months (filtered by creation date), redacts or masks PII fields, and writes the anonymized output to an archive bucket. Option A (TTL) simply deletes files, it does not de-identify them. Option C (Autoclass) automatically transitions files between storage classes for cost optimization - it has no PII-removal capability. Option D (KMS key rotation) re-encrypts data with a new key but does not remove PII from the content.

No community discussion yet for this question.