Cloud Digital Leader Google Cloud Security Practice Question
Which Google Cloud service helps identify and classify sensitive data such as credit card numbers or personal health information in Cloud Storage and BigQuery?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP) API
Sensitive Data Protection (DLP API) scans content to discover and classify sensitive data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Security Command Center
Why it's wrong here
Security Command Center is Google Cloud's unified security and risk management platform that identifies misconfigurations, vulnerabilities, and threats across infrastructure and workloads. While it provides findings for security health, it does not inspect the actual content of data to detect or classify sensitive information such as personally identifiable information or payment card data. Therefore, it is not the service that identifies and classifies sensitive data.
- ✓
Data Loss Prevention (DLP) API
Why this is correct
The Data Loss Prevention (DLP) API is specifically designed to inspect, classify, and protect sensitive data by scanning content for predefined infoTypes (e.g., names, credit card numbers, national ID numbers) and custom patterns. It can analyze text, structured data, and even images via OCR, then classify findings and optionally apply de-identification transformations like redaction or tokenization. This makes it the correct service for identifying and classifying sensitive data.
- ✗
Cloud Data Catalog
Why it's wrong here
Cloud Data Catalog is a metadata management service that helps enterprises discover, organize, and govern their data assets by capturing technical metadata such as table schemas, tags, and data lineage. It enables users to search for datasets and enrich them with business metadata, but it does not scan the underlying data content to identify personal or financial sensitive information. Thus, it is more about managing data context than classifying sensitive data itself.
- ✗
Access Transparency
Why it's wrong here
Access Transparency provides near-real-time logs that show whenever Google personnel access your customer data, offering auditability and assurance about operational actions. It records who accessed what data and when, but it does not analyze or label the data's sensitivity or content. Consequently, its function is auditing access, not classifying sensitive data.
Go deeper
Related to this question
Learn chapter
Cloud Digital Transformation
Key term
Service
A service is a software component or system that performs a specific function and is available to be used by other programs or users over a network.
Key term
Google Cloud
Google Cloud is a suite of cloud computing services offered by Google that provides infrastructure, platform, and software solutions over the internet.
About these practice questions
One of 829 original GCDL practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.