Associate Data Practitioner · Free Practice Question Easy
Question 25
A retail company has customer transaction data with personally identifiable information (PII) that needs to be de-identified before analysis. Which Google Cloud service should they use?
-
A
Cloud KMS
-
B
Secret Manager
-
C
Data Loss Prevention API
-
D
Cloud IAM
Reveal correct answer
Correct answer: C
Explanation
Option C is CORRECT. The Data Loss Prevention (DLP) API is specifically designed for identifying, classifying, and transforming sensitive data like PII. It can automatically detect various types of PII (names, addresses, credit card numbers, etc.) and apply appropriate de-identification techniques such as masking, tokenization, or redaction. The DLP API provides built-in transformations that preserve data utility for analysis while protecting customer privacy.
Option A is INCORRECT. Cloud KMS (Key Management Service) manages encryption keys but doesn't provide capabilities for identifying or transforming PII in datasets. It's focused on cryptographic key management rather than data transformation or de-identification.
Option B is INCORRECT. Secret Manager is designed for storing and managing sensitive values like API keys and passwords. It doesn't provide functionality for scanning datasets to identify PII or applying de-identification transformations to transaction data.
Option D is INCORRECT. Cloud IAM (Identity and Access Management) controls access to Google Cloud resources but doesn't provide tools for identifying or transforming sensitive data within datasets. It's focused on authentication and authorization rather than data transformation.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
