nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #306

Your application development team is releasing a new critical feature. To complete their final testing, they requested 10 thousand real transaction records. The new feature includes format checking…

The correct answer is B. Scan and redact PII from the records by using the Cloud Data Loss Prevention API. Perform. https://cloud.google.com/architecture/de-identification-re-identification-pii-using-cloud-dlp https://cloud.google.com/blog/products/identity-security/taking-charge-of-your-data-using-cloud- dlp-to-de-identify-and-obfuscate-sensitive-information. Using the Cloud Data Loss…

Submitted by manish99· Apr 18, 2026Ensuring data protection

Question

Your application development team is releasing a new critical feature. To complete their final testing, they requested 10 thousand real transaction records. The new feature includes format checking on the primary account number (PAN) of a credit card. You must support the request and minimize the risk of unintended personally identifiable information (PII) exposure. What should you do?

Options

  • ARun the new application by using Confidential Computing to ensure PII and card PAN is
  • BScan and redact PII from the records by using the Cloud Data Loss Prevention API. Perform
  • CEncrypt the records by using Cloud Key Management Service to protect the PII and card PAN.
  • DBuild a tool to replace the card PAN and PII fields with randomly generated values.

How the community answered

(25 responses)
  • A
    24% (6)
  • B
    60% (15)
  • C
    12% (3)
  • D
    4% (1)

Explanation

https://cloud.google.com/architecture/de-identification-re-identification-pii-using-cloud-dlp https://cloud.google.com/blog/products/identity-security/taking-charge-of-your-data-using-cloud- dlp-to-de-identify-and-obfuscate-sensitive-information. Using the Cloud Data Loss Prevention (DLP) API to scan and redact PII, combined with format- preserving encryption, directly addresses the need to protect sensitive data while maintaining the necessary format for testing. This ensures that the development team can perform their tests without exposing real PII.

Topics

#Data Loss Prevention#PII De-identification#Test Data Management#Data Masking

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice