Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 67

Question

A company is backing up application logs to a Cloud Storage bucket shared with both analysts and the administrator. Analysts should only have access to logs that do not contain any personally identifiable information (PII). Log files containing PII should be stored in another bucket that is only accessible by the administrator. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Use Cloud Pub/Sub and Cloud Functions to trigger a Data Loss Prevention scan every time a file is uploaded to the shared bucket. If the scan detects PII, have the function move into a Cloud Storage bucket only accessi... Cloud Functions runs event-driven code without managing servers and scales automatically. Cloud Storage provides durable, scalable object storage that is fully managed. Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams.

Google Cloud Professional Cloud Security Engineer PCSE — Question 67