nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #373

Your financial services company needs to process customer personally identifiable information (PII) for analytics while adhering to strict privacy regulations. You must transform this data to…

The correct answer is D. Configure Sensitive Data Protection (SDP) to de-identify PII using format-preserving encryption. Sensitive Data Protection (SDP) can de-identify PII using format-preserving encryption (FPE), which transforms sensitive data into a protected form while maintaining the original format and analytical consistency. This approach ensures privacy compliance and allows controlled…

Submitted by javi_es· Apr 18, 2026Ensuring data protection

Question

Your financial services company needs to process customer personally identifiable information (PII) for analytics while adhering to strict privacy regulations. You must transform this data to protect individual privacy to ensure that the data retains its original format and consistency for analytical integrity. Your solution must avoid full irreversible deletion. What should you do?

Options

  • AUse Cloud Key Management Service (Cloud KMS) to encrypt the entire dataset with a customer-
  • BSet up VPC Service Controls around the BigQuery project. Implement row-level encryption.
  • CImplement a custom BigQuery user-defined function (UDF) by using JavaScript to hash all
  • DConfigure Sensitive Data Protection (SDP) to de-identify PII using format-preserving encryption

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    13% (3)
  • D
    78% (18)

Explanation

Sensitive Data Protection (SDP) can de-identify PII using format-preserving encryption (FPE), which transforms sensitive data into a protected form while maintaining the original format and analytical consistency. This approach ensures privacy compliance and allows controlled re- identification if necessary, avoiding irreversible data loss while enabling secure analytics.

Topics

#Sensitive Data Protection#Data De-identification#Format-Preserving Encryption#PII Privacy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice