Your organization is migrating a sensitive data processing workflow for customer Personally Identifiable Information (PII) from on-premises to Google Cloud. What security measures should you design to mitigate the risk of data exfiltration in the cloud environment?

Exam-Like

Encrypt all sensitive data in transit and at rest. Establish secure communication channels by using TLS and HTTPS protocols.

Implement a Cloud DLP solution to scan and identify sensitive information, and apply redaction or masking techniques to the PII. Integrate VPC SC with your network security controls to block potential data exfiltration attempts.

Restrict all outbound network traffic from cloud resources. Implement rigorous access controls and logging for all sensitive data and the systems that process the data.

Rely on employee expertise to prevent accidental data exfiltration incidents.

Google Professional Cloud Security Engineer

Get started today

Comments

Your organization is migrating a sensitive data processing workflow for customer Personally Identifiable Information (PII) from on-premises to Google Cloud. What security measures should you design to mitigate the risk of data exfiltration in the cloud environment?