Google Cloud Professional Cloud Security Engineer — Question 96

An organization wants to track how bonus compensations have changed over time to identify employee outliers and correct earning disparities. This task must be performed without exposing the sensitive compensation data for any individual and must be reversible to identify the outlier.

Which Cloud Data Loss Prevention API technique should you use?

Answer options

• A. Cryptographic hashing
• B. Redaction
• C. Format-preserving encryption
• D. Generalization

Correct answer: C

Explanation

Format-preserving encryption is the correct choice because it allows for sensitive data to be encrypted while maintaining its original format, making it possible to analyze trends without revealing individual compensation details. Cryptographic hashing and redaction do not allow for reversibility, which is necessary to identify outliers, and generalization may not sufficiently protect sensitive information while still enabling the necessary analysis.