Google Exam Associate Data Practitioner Topic 4 Question 1 Discussion

Actual exam question for Google's Associate Data Practitioner exam

Question #: 1
Topic #: 4

[All Associate Data Practitioner Questions]

Your organization stores highly personal data in BigQuery and needs to comply with strict data privacy regulations. You need to ensure that sensitive data values are rendered unreadable whenever an employee leaves the organization. What should you do?

AUse AEAD functions and delete keys when employees leave the organization.

BUse dynamic data masking and revoke viewer permissions when employees leave the organization.

CUse customer-managed encryption keys (CMEK) and delete keys when employees leave the organization.

DUse column-level access controls with policy tags and revoke viewer permissions when employees leave the organization.

Show Suggested Answer

Suggested Answer: C

Using customer-managed encryption keys (CMEK) allows you to encrypt highly sensitive data in BigQuery with encryption keys managed by your organization. When an employee leaves the organization, you can render the data unreadable by deleting or revoking access to the encryption keys associated with the data. This approach ensures compliance with strict data privacy regulations by making the data inaccessible without the encryption keys, providing strong control over data access and security.

by Felix at Jan 22, 2025, 07:52 PM

Limited Time Offer

25%

13 days ago

Definitely D. Dynamic data masking and AEAD functions are good, but policy tags and access controls give you the most control.

upvoted 0 times

Roselle

1 days ago

I agree, D seems like the best option for controlling access to sensitive data.

upvoted 0 times

...

1 months ago

I think we should use AEAD functions and delete keys when employees leave.

upvoted 0 times

...