Exam Professional Machine Learning Engineer topic 1 question 17 discussion

Should be D https://cloud.google.com/architecture/automating-classification-of-data-uploaded-to-cloud-storage#building_the_quarantine_and_classification_pipeline

D; others pose risks

Task: "You are building a real-time prediction engine". Solution D: " Periodically conduct a bulk scan" is NOT REAL TIME. It is the recommended architecture, but in order to satisfy the task, the cloud function would need to be triggered by each new data landing in GCP - which is totally doable and would be the right solution, but this is NOT WHAT THE ANSWER IS SAYING. Therefore B is the next best option (although not the recommended architecture design)

why not b, it requires real-time right?

D) The best choice for this scenario would be D. Create three buckets of data: Quarantine, Sensitive, and Non-sensitive. Write all data to the Quarantine bucket. Periodically conduct a bulk scan of that bucket using the DLP API, and move the data to either the Sensitive or Non-Sensitive bucket.

D - Quarantine bucket is the google reccomended approach

Option B does not provide a clear separation between sensitive and non-sensitive data before it is written to BigQuery, which means that PII might be exposed during the process. But, in D offers a better level of security by writing all the data to a Quarantine bucket first. This way, the DLP API can scan and categorize the data into Sensitive or Non-sensitive buckets before it is further processed or stored. This ensures that PII is not accessible by unauthorized individuals, as the sensitive data is identified and separated from the non-sensitive data before any further actions are taken.

real-time prediction engine, that streams files to Google Cloud. PII is not accessible by unauthorized individuals. D

D should be the correct answer

Went with D

B is real time

It's D

A, D, C they do not apply to a realtime case, all three say that the scan is applied periodically Then it's B

I think that is the correct because of the "real time" application.

D is the right answer: you can temporarily store the sensitive data in a Quarantine bucket with restricted access, then move the data to the relative buckets once the PII have been protected.

Correct answer is "D"

Answer is D : Question says that there MAY be sensitive data, so not all data is sensitive. This is why we need 3 buckets : Quarantine as a landing bucket, sensitive for sensitive data after DLP scan, non-sensitive for non-sensitive after DLP scan. https://cloud.google.com/architecture/automating-classification-of-data-uploaded-to-cloud-storage