Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ71

Ensuring data protection

An organization is migrating a sensitive data-processing workflow from on-premises infrastructure to Google Cloud. The workflow collects, stores, and analyzes customer information that includes personally identifiable information (PII). You must design security measures to reduce the risk of data exfiltration in this new cloud environment. What should you do?

  • A Encrypt all sensitive data in transit and at rest. Establish secure communication channels by using TLS and HTTPS protocols.
  • B Implement a Cloud DLP solution to scan and identify sensitive information, and apply redaction or masking techniques to the PII. Integrate VPC SC with your network security controls to block potential data exfiltration attempts.
  • C Restrict all outbound network traffic from cloud resources. Implement rigorous access controls and logging for all sensitive data and the systems that process the data.
  • D Rely on employee expertise to prevent accidental data exfiltration incidents.
Explanation

Sensitive Data Protection (formerly Cloud DLP) can discover and classify PII, then de-identify it using techniques such as redaction or masking, reducing the exposure of usable personal data. VPC Service Controls creates service perimeters and applies ingress and egress controls to protect Google Cloud resources from unauthorized access and data movement, directly mitigating accidental or intentional data exfiltration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!