Professional Cloud Security EngineerEnsuring data protectionHard
A media company stores large volumes of video assets in Cloud Storage. They need a system to automatically scan these assets for embedded sensitive information, such as unredacted personal details in video frames or audio transcripts, before they are published. The system should identify these sensitive data types and then ideally redacting them or flagging them for manual review. Which Google Cloud service is designed to perform this type of content inspection and sensitive data detection?
- ACloud Video Intelligence API
- BCloud Vision AI
- CCloud Natural Language API
- DData Loss Prevention (DLP) API
Show answer & explanationAnswer & explanation
Correct answer: D. Data Loss Prevention (DLP) API
The Data Loss Prevention (DLP) API is designed to discover, classify, and protect sensitive data in various content types, including structured and unstructured data, images (OCR for text in video frames), and audio transcripts. It can identify sensitive infoTypes and apply de-identification or initiate flagging for review, directly addressing the requirement for scanning video assets for embedded sensitive information.
Why the other options are wrong
- A. Cloud Video Intelligence API analyzes video content for labels, objects, and activities but does not inherently detect sensitive data types like PII for DLP compliance.
- B. Cloud Vision AI can detect objects and text in images but is not specialized for identifying infoTypes like PII or financial data for DLP purposes.
- C. Cloud Natural Language API analyzes text for sentiment, entities, and syntax but is not designed for broad sensitive data detection across various data types (images, audio, structured data) like DLP.
Data Loss Prevention (DLP) API
A Google Cloud service that helps discover, classify, and protect sensitive data (infoTypes) across various data sources and content types, including text, images, and structured data.
- Identifies over 150 built-in infoTypes (e.g., credit card numbers, SSN).
- Supports de-identification methods like redaction, tokenization, FPE.
- Can scan data at rest and in transit.
Memory trick: DLP finds hidden secrets, like a digital detective.