GCP Professional Cloud Security Engineer Practice Question

A retail bank is ingesting millions of retail transactions into BigQuery. Each record includes a 10-digit internal account number (for example, 7326159483) that appears only when immediately preceded by the literal string "ACCT#" (for example, "ACCT#7326159483"). Security architects must configure Sensitive Data Protection so that:

The account numbers are discovered and classified.
Random 10-digit numbers that are not associated with the "ACCT#" marker are ignored to reduce false positives. Which SDP configuration best satisfies these requirements?

Use the built-in CREDIT_CARD_NUMBER infoType and increase the likelihood threshold so that only high-confidence matches are returned.
Define a custom regular-expression infoType for a 10-digit number and rely solely on that expression without additional context rules.
Create a dictionary-based custom infoType containing all possible "ACCT#" values and enable partial matching.
Define a custom regular-expression infoType for a 10-digit number and attach a hotword rule that requires the term "ACCT#" within five characters before the match.

Report Issue

Answer Description

Because the bank needs to detect a numeric pattern that is not covered by a built-in detector and wants to restrict matches to numbers that are directly preceded by a specific context string, the architects should create a custom regular-expression infoType for a 10-digit number and add a hotword rule that requires the literal "ACCT#" within a short proximity (for example, five characters before the match). A dictionary detector would not catch arbitrary numbers, and using only the regex would raise many false positives. Relying on the built-in CREDIT_CARD_NUMBER detector is inappropriate because it looks for 13-19-digit PAN formats with checksum validation, not 10-digit proprietary IDs.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.