Exam Professional Cloud Architect topic 3 question 1 discussion

Answer would be B https://cloud.google.com/community/tutorials/pci-tokenizer Deterministic output means that a given set of inputs (card number, expiration, and userID) will always generate the same token. This is useful if you want to rely on the token value to deduplicate your token stores. You can simply match a newly generated token to your existing catalog of tokens to determine whether the card has been previously stored. Depending on your application architecture, this can be a very useful feature. However, this could also be accomplished using a salted hash of the input values. https://cloud.google.com/architecture/tokenizing-sensitive-cardholder-data-for-pci-dss Firestore is the next major version of Datastore. Firestore can run in Datastore mode, which uses the same API as Datastore and scales to millions of writes per second,

Got this question in my exam, answered B

A's SecretManager and C's Memorystore are absolutely different because their purposes are different. D is different because it does not mention duplication. What remains is B.

Why isn't it C since Firestore doesn't meet the low latency requirement as someone said before? Bard thinks the answer is C for low latency and even cost because you're only paying for what you use. Thoughts?

Between B (firestore in datastore mode)and D (Cloud SQL) B is better solution since firestore is preferred for low latency queries, also since firestore is in datastore mode (does not include real time capabilities supported in native mode - i.e mobile updates) it's cost effective.

Why not C ?

From what I can work out column level encryption needs to be implemented by the client in Cloud SQL. So both B & D are identical solutions except for the database type? Cloud SQL seems to do a better job of the avoiding duplicates requirement & seems a better fit. Don't see why B seems to be so popular, would have expect a bigger split on the vote. Am I missing something

B fits the case

B Is the Correct Answer

B is ok

B as its clear in the example by google https://cloud.google.com/architecture/tokenizing-sensitive-cardholder-data-for-pci-dss

B, but should be reworded as follows for clarify. "B. Encrypt the card data with a deterministic algorithm and store in Firestore using Datastore mode." https://cloud.google.com/architecture/tokenizing-sensitive-cardholder-data-for-pci-dss#a_service_for_handling_sensitive_information

I would go with B.

Hmmm. What is about the very first point low latency? Firefstore is not the one with best latency values... https://cloud.google.com/architecture/building-scalable-apps-with-cloud-firestore#latency

ans is D

Had this question on my exam.

Considering low latency and minimal cost, will go with D.