Google Professional Machine Learning Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
In the context of deploying a real-time prediction engine on Google Cloud that processes streaming files potentially containing Personally Identifiable Information (PII), ensuring the security and privacy of PII is paramount. The Cloud Data Loss Prevention (DLP) API plays a critical role in identifying and protecting PII. Considering the need for real-time processing, cost efficiency, and compliance with data protection regulations, which of the following strategies best ensures that PII remains inaccessible to unauthorized individuals while maintaining system performance and scalability? (Choose two correct options if option E is available, otherwise choose one.)
A
Implement a single pipeline where all files are streamed directly to BigQuery, and use scheduled DLP API scans to identify and segregate PII data post-ingestion. This approach minimizes initial setup complexity but may delay PII detection.
B
Design a dual-bucket system where all incoming data is initially stored in a 'Non-sensitive' bucket. Periodic DLP API scans are performed to identify PII, which is then moved to a 'Sensitive' bucket. This method reduces initial scanning overhead but risks temporary PII exposure.
C
Utilize a real-time processing pipeline that writes data to BigQuery and simultaneously triggers DLP API scans during the ingestion process. This ensures immediate PII detection but may increase latency and cost due to the continuous scanning.
D
Establish a three-bucket architecture comprising 'Quarantine', 'Sensitive', and 'Non-sensitive' buckets. All incoming data is first placed in 'Quarantine', scanned by the DLP API, and then moved to the appropriate bucket based on the scan results. This method ensures PII is never exposed to unauthorized access but requires more initial setup.
E
Combine real-time DLP API scanning with batch processing for comprehensive coverage. Initially, scan data in real-time as it's ingested, and supplement with periodic batch scans to catch any missed PII. This approach offers thorough PII protection but at a higher operational cost.