PCSE Ensuring Data Protection Practice Question
A healthcare organization must ensure that Protected Health Information (PHI) stored in Cloud Storage buckets is not inadvertently shared. They want to automatically scan all new objects added to the bucket for sensitive data and log findings. Which approach should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Cloud DLP inspection job triggers with a schedule to scan the bucket periodically.
Cloud DLP job triggers can be configured to scan Cloud Storage buckets on a schedule or event-driven (e.g., via Cloud Storage Pub/Sub notifications). The trigger will inspect objects for sensitive data and log results. This meets the requirement for automatic scanning.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Data Loss Prevention (DLP) API to manually scan the bucket each time a new object is added.
Why it's wrong here
Manual scanning does not meet the requirement for automatic scanning.
- ✗
Use Access Transparency logs to monitor all access to the bucket.
Why it's wrong here
Access Transparency logs record Google admin access, not data content.
- ✗
Use Cloud Audit Logs and create a log-based metric to detect sensitive data.
Why it's wrong here
Audit logs record API calls, not data content; they cannot scan for sensitive data.
- ✓
Use Cloud DLP inspection job triggers with a schedule to scan the bucket periodically.
Why this is correct
DLP job triggers can be set to scan Cloud Storage objects on a schedule or event-driven via Pub/Sub, allowing automatic scanning of new objects.
Go deeper
Related to this question
About these practice questions
One of 960 original PCSE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.