GCP Professional Cloud Security Engineer Practice Question
A retail bank is ingesting millions of retail transactions into BigQuery. Each record includes a 10-digit internal account number (for example, 7326159483) that appears only when immediately preceded by the literal string "ACCT#" (for example, "ACCT#7326159483"). Security architects must configure Sensitive Data Protection so that:
The account numbers are discovered and classified.
Random 10-digit numbers that are not associated with the "ACCT#" marker are ignored to reduce false positives. Which SDP configuration best satisfies these requirements?
Define a custom regular-expression infoType for a 10-digit number and attach a hotword rule that requires the term "ACCT#" within five characters before the match.
Use the built-in CREDIT_CARD_NUMBER infoType and increase the likelihood threshold so that only high-confidence matches are returned.
Create a dictionary-based custom infoType containing all possible "ACCT#" values and enable partial matching.
Define a custom regular-expression infoType for a 10-digit number and rely solely on that expression without additional context rules.
Because the bank needs to detect a numeric pattern that is not covered by a built-in detector and wants to restrict matches to numbers that are directly preceded by a specific context string, the architects should create a custom regular-expression infoType for a 10-digit number and add a hotword rule that requires the literal "ACCT#" within a short proximity (for example, five characters before the match). A dictionary detector would not catch arbitrary numbers, and using only the regex would raise many false positives. Relying on the built-in CREDIT_CARD_NUMBER detector is inappropriate because it looks for 13-19-digit PAN formats with checksum validation, not 10-digit proprietary IDs.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a custom regular-expression infoType in GCP's Sensitive Data Protection?
Open an interactive chat with Bash
What is a hotword rule in GCP's Sensitive Data Protection?
Open an interactive chat with Bash
What are false positives in sensitive data detection and how does GCP manage them?
Open an interactive chat with Bash
What is a custom regular-expression infoType in GCP's Sensitive Data Protection?
Open an interactive chat with Bash
What is a hotword rule and how does it work in Sensitive Data Protection?
Open an interactive chat with Bash
Why are dictionary-based custom infoTypes not suitable for detecting account numbers in this scenario?
Open an interactive chat with Bash
GCP Professional Cloud Security Engineer
Ensuring data protection
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .