Google Cloud Professional Cloud Security Engineer — Question 270

When working with agents in the support center via online chat, your organization's customers often share pictures of their documents with personally identifiable information (PII). Your leadership team is concerned that this PII is being stored as part of the regular chat logs, which are reviewed by internal or external analysts for customer service trends.
You want to resolve this concern while still maintaining data utility. What should you do?

Answer options

• A. Use Cloud Key Management Service to encrypt PII shared by customers before storing it for analysis.
• B. Use Object Lifecycle Management to make sure that all chat records containing PII are discarded and not saved for analysis.
• C. Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.
• D. Use the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Correct answer: C

Explanation

The correct answer is C because using the image inspection and redaction actions of the DLP API specifically targets and removes PII from images, ensuring that sensitive information is not stored. Option A is incorrect as encryption does not prevent PII from being stored; it merely protects it. Option B is not viable since it would eliminate useful chat logs entirely. Option D addresses text but not images, which is the primary concern in this scenario.