Google Cloud Professional Cloud Security Engineer — Question 26

An employer wants to track how bonus compensations have changed over time to identify employee outliers and correct earning disparities. This task must be performed without exposing the sensitive compensation data for any individual and must be reversible to identify the outlier.
Which Cloud Data Loss Prevention API technique should you use to accomplish this?

Answer options

• A. Generalization
• B. Redaction
• C. CryptoHashConfig
• D. CryptoReplaceFfxFpeConfig

Correct answer: D

Explanation

The correct answer, CryptoReplaceFfxFpeConfig, is designed for reversible transformations that allow the original data to be retrieved, making it ideal for identifying outliers without exposing sensitive information. In contrast, Generalization and Redaction do not allow for reversibility, while CryptoHashConfig is not suitable for the requirement of identifying outliers since it creates a one-way hash that cannot be reversed.