Your organization is building a chatbot that is powered by generative AI to deliver automated conversations with internal employees. You must ensure that no data with personally identifiable…

Question

Options

• AEncrypt data at rest for both input and output by using Cloud KMS, and apply least privilege
• BDiscover and transform PII data in both input and output by using the Cloud Data Loss Prevention
• CPrevent PII data exfiltration by using VPC-SC to create a safe scope around your chatbot.
• DScan both input and output by using data encryption tools from the Google Cloud Marketplace.

• A
  12% (2)
• B
  76% (13)
• C
  6% (1)
• D
  6% (1)

Explanation

Cloud Data Loss Prevention (Cloud DLP) is Google Cloud's purpose-built service for discovering, classifying, and de-identifying sensitive data including PII. By integrating Cloud DLP into both the chatbot's input pipeline (inspecting user messages) and output pipeline (inspecting generated responses), you can detect and transform (redact, mask, or tokenize) PII before it is processed or surfaced to users. Encrypting data at rest (option A) and VPC Service Controls (option C) protect against different threats (unauthorized access and data exfiltration) but do not inspect or remove PII content from messages. Encryption tools (option D) similarly do not identify or strip PII from conversational content.

No community discussion yet for this question.