GCP Professional Cloud Security Engineer Practice Question

Your company is preparing to share a BigQuery dataset that contains an E.164-formatted phone_number column (for example, "+14155551234") with an external analytics partner. The partner only needs the last four digits for grouping, and compliance policy requires that every preceding character be replaced by a single, repeated masking symbol so that records appear like "+########1234". You will run a one-time Cloud DLP job to de-identify the column and leave all other fields untouched. Which transformation should you configure to meet the requirement with the least implementation effort?

  • Character masking transformation configured to mask all but the last four characters of PHONE_NUMBER, using "#" as the masking symbol and reverse_order enabled.

  • Numeric bucketing transformation that replaces phone numbers with predefined range buckets.

  • Redaction transformation that removes values identified as PHONE_NUMBER.

  • Deterministic cryptographic transformation that encrypts the phone numbers with a customer-managed key and uses surrogate annotations.

GCP Professional Cloud Security Engineer
Ensuring data protection
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot