ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam
Go to Exam

Exam Professional Cloud Security Engineer topic 1 question 67 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 67
Topic #: 1
[All Professional Cloud Security Engineer Questions]

A company is backing up application logs to a Cloud Storage bucket shared with both analysts and the administrator. Analysts should only have access to logs that do not contain any personally identifiable information (PII). Log files containing PII should be stored in another bucket that is only accessible by the administrator.
What should you do?

  • A. Use Cloud Pub/Sub and Cloud Functions to trigger a Data Loss Prevention scan every time a file is uploaded to the shared bucket. If the scan detects PII, have the function move into a Cloud Storage bucket only accessible by the administrator.
  • B. Upload the logs to both the shared bucket and the bucket only accessible by the administrator. Create a job trigger using the Cloud Data Loss Prevention API. Configure the trigger to delete any files from the shared bucket that contain PII.
  • C. On the bucket shared with both the analysts and the administrator, configure Object Lifecycle Management to delete objects that contain any PII.
  • D. On the bucket shared with both the analysts and the administrator, configure a Cloud Storage Trigger that is only triggered when PII data is uploaded. Use Cloud Functions to capture the trigger and delete such files.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by MohitA at Sept. 2, 2020, 10:08 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
MohitA
Highly Voted 3 years, 7 months ago
A is the ans
upvoted 17 times
...
talktolanka
Highly Voted 3 years ago
Answer A https://codelabs.developers.google.com/codelabs/cloud-storage-dlp-functions#0 https://www.youtube.com/watch?v=0TmO1f-Ox40
upvoted 8 times
...
Learn2fail
Most Recent 7 months ago
Selected Answer: A
A is answer
upvoted 2 times
...
AzureDP900
1 year, 5 months ago
A is right
upvoted 2 times
...
AwesomeGCP
1 year, 6 months ago
Selected Answer: A
A. Use Cloud Pub/Sub and Cloud Functions to trigger a Data Loss Prevention scan every time a file is uploaded to the shared bucket. If the scan detects PII, have the function move into a Cloud Storage bucket only accessible by theadministrator.
upvoted 4 times
...
[Removed]
1 year, 7 months ago
Selected Answer: A
A it is.
upvoted 2 times
...
[Removed]
3 years ago
I also choose A.
upvoted 3 times
...
DebasishLowes
3 years, 1 month ago
Ans : A
upvoted 2 times
...
soukumar369
3 years, 4 months ago
Correct answer is A : Data Loss Prevention scan
upvoted 2 times
...
soukumar369
3 years, 4 months ago
A is correct.
upvoted 1 times
...
[Removed]
3 years, 6 months ago
Ans - A
upvoted 1 times
...
genesis3k
3 years, 6 months ago
Answer is A.
upvoted 1 times
...
passtest100
3 years, 7 months ago
SHOULD BE A
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago