GCP Professional Cloud Security Engineer Practice Question
A multinational retailer stores raw event logs in several Google Cloud projects. Some logs reside in regional Cloud Storage buckets, while others are streamed into BigQuery datasets by a Dataflow pipeline. The security team must continuously discover any newly ingested credit-card or government-ID data, calculate risk scores, and view results in one central Sensitive Data Protection dashboard. They want to avoid scheduling a separate inspection job for every individual bucket or dataset, but are willing to perform a one-time setup in each project. Which approach best meets these requirements?
Attach Data Catalog policy tags to BigQuery tables and rely on policy insights to detect new credit-card or government-ID data automatically.
Enable organization-level Sensitive Data Protection discovery for Cloud Storage, and in every project configure a BigQuery data profile scan so all datasets are automatically profiled and results appear in the Sensitive Data Protection dashboard.
Create individual Cloud DLP inspection jobs for each Cloud Storage bucket and BigQuery dataset, then aggregate the findings in Cloud Logging.
Use Cloud Asset Inventory to export metadata for all storage resources and query it in BigQuery to locate sensitive fields.
Enabling organization-level Sensitive Data Protection discovery automatically profiles Cloud Storage buckets across all projects. To cover BigQuery data, each project that contains BigQuery resources needs a single data profile scan configuration, which automatically profiles every existing and newly created dataset in that project. Together, these settings provide continuous discovery, built-in risk scoring, and centralized visibility in the Sensitive Data Protection dashboard without requiring per-bucket or per-table jobs. Relying solely on manual inspection jobs, Cloud Asset Inventory, or Data Catalog policy tags would either miss continuous discovery, lack risk scoring, or require granular job scheduling.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Google Cloud Sensitive Data Protection?
Open an interactive chat with Bash
How does a BigQuery data profile scan work?
Open an interactive chat with Bash
What is the benefit of organization-level Sensitive Data Protection discovery?
Open an interactive chat with Bash
What is Sensitive Data Protection in Google Cloud?
Open an interactive chat with Bash
How does a data profile scan work in BigQuery for Sensitive Data Protection?
Open an interactive chat with Bash
Why is organization-level discovery beneficial for Cloud Storage Sensitive Data Protection?
Open an interactive chat with Bash
GCP Professional Cloud Security Engineer
Ensuring data protection
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .