Cloud Digital Leader Trust and security with Google Cloud Practice Question
This GCDL practice question tests your understanding of trust and security with google cloud. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Which TWO features are part of Cloud Data Loss Prevention (Cloud DLP)?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Classification of sensitive data such as credit card numbers
Cloud DLP is specifically designed to inspect, classify, and protect sensitive data. Option A is correct because Cloud DLP uses over 150 built-in infoType detectors to automatically identify sensitive data types, such as credit card numbers (matching Luhn algorithm and PAN format), Social Security numbers, and passport numbers, enabling organizations to understand where their sensitive data resides.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Classification of sensitive data such as credit card numbers
Why this is correct
Cloud DLP can detect and classify sensitive data types.
Related concept
Read the scenario before looking for a memorised answer.
✓
De-identification of data through masking, tokenization, and encryption
Why this is correct
Cloud DLP provides methods to de-identify data.
Related concept
Read the scenario before looking for a memorised answer.
✗
Network vulnerability scanning
Why it's wrong here
Network vulnerability scanning is done by Cloud Security Scanner.
✗
Removal of malware from uploaded files
Why it's wrong here
Malware removal is not a Cloud DLP feature.
✗
Creation of IAM policies
Why it's wrong here
IAM policies are created via Cloud IAM, not Cloud DLP.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Google Cloud often tests the distinction between data-level security (Cloud DLP) and infrastructure-level security (vulnerability scanning, malware removal, IAM) to see if candidates confuse Cloud DLP's content inspection capabilities with broader security services.
Detailed technical explanation
How to think about this question
Cloud DLP operates by scanning data at rest (Cloud Storage, BigQuery) and in transit (via API calls) using a combination of deterministic and probabilistic classifiers. For credit card detection, it validates the Luhn checksum and checks against known BIN ranges, while de-identification methods like tokenization replace sensitive values with a non-reversible token stored in a separate mapping table, ensuring that even if the tokenized data is exposed, the original value remains protected. In a real-world scenario, a healthcare organization might use Cloud DLP to automatically redact patient names from medical records before sharing them with a third-party analytics platform.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this GCDL question in full detail.
Trust and security with Google Cloud — This question tests Trust and security with Google Cloud — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Classification of sensitive data such as credit card numbers — Cloud DLP is specifically designed to inspect, classify, and protect sensitive data. Option A is correct because Cloud DLP uses over 150 built-in infoType detectors to automatically identify sensitive data types, such as credit card numbers (matching Luhn algorithm and PAN format), Social Security numbers, and passport numbers, enabling organizations to understand where their sensitive data resides.
What should I do if I get this GCDL question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.