Professional Cloud Security EngineerEnsuring data protectionEasy
A global media company stores terabytes of video content in Cloud Storage. They need to classify and identify any personally identifiable information (PII) within the video metadata and accompanying text files, and then report on the types and locations of this sensitive data for compliance auditing. Which Google Cloud service should they use?
- AData Loss Prevention (DLP) API with infoType detectors.
- BCloud Vision API with custom labels.
- CCloud Natural Language API for entity extraction.
- DCloud Search for content indexing.
Show answer & explanationAnswer & explanation
Correct answer: A. Data Loss Prevention (DLP) API with infoType detectors.
The Data Loss Prevention (DLP) API is specifically designed to discover, classify, and report on sensitive data like PII across various Google Cloud services, including Cloud Storage. Its infoType detectors are pre-trained to identify common sensitive data categories.
Why the other options are wrong
- B. Cloud Vision API is for image and video analysis, not for identifying PII within text or metadata.
- C. Cloud Natural Language API analyzes text for sentiment, entities, and syntax, but it's not primarily designed for sensitive data classification and reporting for compliance.
- D. Cloud Search is for enterprise search capabilities across data, not for classifying and reporting on PII for compliance auditing.
Data Loss Prevention (DLP) API
A Google Cloud service that helps discover, classify, and protect sensitive data (like PII) across various data sources. It uses infoType detectors to identify specific types of sensitive information.
- Identifies over 150 sensitive data types (infoTypes).
- Scans structured and unstructured data (text, images, files).
- Used for classification, risk analysis, de-identification, and reporting.
- Essential for compliance and privacy management.
Memory trick: To find sensitive data, DLP's InfoTypes will show the way!