PCSE Cloud DLP job trigger Practice Question
A company wants to implement automatic de-identification of sensitive data stored in Cloud Storage using Cloud DLP. They need to scan new objects as they are uploaded and apply a transformation to remove credit card numbers. Which three resources must they create? (Choose THREE.)
⚠ Common exam trap
A common pitfall is to assume that an inspection template is required for any DLP job, but in this scenario the de-identification template is mandatory because the goal is to transform data (remove credit card numbers). The three required resources are the job trigger (to automatically scan new objects), the de-identification template (to specify the transformation), and the DLP job (to bind trigger and template). An inspection template is not needed because the job can directly specify infoTypes to inspect.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud DLP job that uses the trigger and template
To automatically de-identify sensitive data in Cloud Storage using Cloud DLP, you must create three resources: a Cloud DLP job trigger (C) to initiate the scan when new objects are uploaded, a Cloud DLP de-identification template (E) that specifies the transformation (e.g., removing credit card numbers), and a Cloud DLP job (B) that references both the trigger and the de-identification template. The inspection template (A) is not required because the job can directly specify the infoTypes to inspect in its configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud DLP inspection template
Why it's wrong here
Inspection templates only find data; they don't transform.
- ✓
Cloud DLP job that uses the trigger and template
Why this is correct
The job ties together the trigger and template.
- ✓
Cloud DLP job trigger
Why this is correct
A job trigger runs a job when new objects appear.
- ✗
Cloud Function to process objects
Why it's wrong here
A Cloud Function is not necessary when using a DLP job trigger.
- ✓
Cloud DLP de-identification template
Why this is correct
Defines the transformation (e.g., masking credit cards).
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCSE question from scratch — 960 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.