nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #328

Your organization wants to publish yearly reports of your website usage analytics. You must ensure that no data with personally identifiable information (PII) is published by using the Cloud Data…

The correct answer is C. Discover and transform PII data in your reports by using the Cloud DLP API. Cloud DLP's de-identification (transformation) capabilities allow you to discover PII and replace it using techniques such as masking, tokenization, pseudonymization, or generalization. This preserves the data's structure and analytical value (data integrity) while removing or…

Submitted by andreas_gr· Apr 18, 2026Ensuring data protection

Question

Your organization wants to publish yearly reports of your website usage analytics. You must ensure that no data with personally identifiable information (PII) is published by using the Cloud Data Loss Prevention (Cloud DLP) API. Data integrity must be preserved. What should you do?

Options

  • ADetect all PII in storage by using the Cloud DLP API. Create a cloud function to delete the PII.
  • BDiscover and quarantine your PII data in your storage by using the Cloud DLP API.
  • CDiscover and transform PII data in your reports by using the Cloud DLP API.
  • DEncrypt the PII from the report by using the Cloud DLP API.

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    16% (6)
  • C
    71% (27)
  • D
    11% (4)

Explanation

Cloud DLP's de-identification (transformation) capabilities allow you to discover PII and replace it using techniques such as masking, tokenization, pseudonymization, or generalization. This preserves the data's structure and analytical value (data integrity) while removing or obfuscating the actual PII - making it safe for publishing in reports. Option A deletes the PII entirely, which destroys data integrity and makes the report incomplete. Option B quarantines the data, which prevents publication rather than enabling it. Option D encrypts the PII, but encrypted PII is still considered PII if it can be decrypted; encryption does not make the report safe to publish. Transformation via Cloud DLP is the only approach that satisfies both requirements: no PII published and data integrity preserved.

Topics

#Cloud DLP#PII Protection#Data De-identification#Data Integrity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice