Google Associate Data Practitioner Exam - Topic 4 Question 2 Discussion

Actual exam question for Google's Associate Data Practitioner exam

Question #: 2
Topic #: 4

[All Associate Data Practitioner Questions]

You are a data analyst working with sensitive customer data in BigQuery. You need to ensure that only authorized personnel within your organization can query this data, while following the principle of least privilege. What should you do?

AEnable access control by using IAM roles.

BEncrypt the data by using customer-managed encryption keys (CMEK).

CUpdate dataset privileges by using the SQL GRANT statement.

DExport the data to Cloud Storage, and use signed URLs to authorize access.

Show Suggested Answer

Suggested Answer: D

Using IAM roles to enable access control in BigQuery is the best approach to ensure that only authorized personnel can query the sensitive customer data. IAM allows you to define granular permissions at the project, dataset, or table level, ensuring that users have only the access they need in accordance with the principle of least privilege. For example, you can assign roles like roles/bigquery.dataViewer to allow read-only access or roles/bigquery.dataEditor for more advanced permissions. This approach provides centralized and manageable access control, which is critical for protecting sensitive data.

by Isidra at Jan 24, 2025, 12:55 AM

Limited Time Offer

25%

Off

Get Premium Associate Data Practitioner Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tegan

6 days ago

I think B is more about data security than access control.

upvoted 0 times

...

Kristine

12 days ago

A is definitely the way to go for access control!

upvoted 0 times

...

Celeste

17 days ago

Exporting data to Cloud Storage with signed URLs seems like a workaround, but I don't think it directly addresses the access control needed for querying in BigQuery.

upvoted 0 times

...

Mendy

23 days ago

I'm a bit confused about the SQL GRANT statement. I feel like it might be relevant, but I can't recall if it applies to BigQuery specifically.

upvoted 0 times

...

Raymon

28 days ago

I remember a practice question where we had to manage access to sensitive data, and IAM roles were definitely emphasized as a key solution.

upvoted 0 times

...

Linwood

1 month ago

I think enabling access control with IAM roles is the best option here, but I'm not entirely sure if it covers all aspects of the least privilege principle.

upvoted 0 times

...

Ryan

1 month ago

I'm a little confused on the difference between options A and C. Aren't they both about managing permissions? I'll need to review the details on each one to decide which is the better approach for this scenario.

upvoted 0 times

...

Lawrence

1 month ago

Okay, I think I've got this. The key here is following the principle of least privilege, so I'm leaning towards option A with IAM roles. That way I can really fine-tune the permissions for each authorized user.

upvoted 0 times

...

Edison

1 month ago

Hmm, I'm not sure about this one. I'm thinking option B with customer-managed encryption keys might be the way to go, but I'm not totally confident. I'll need to double-check the details on that.

upvoted 0 times

...

Nickie

1 month ago

This seems pretty straightforward. I'd go with option A and use IAM roles to control access. That way I can grant the least amount of privilege to each user.

upvoted 0 times

...

Karol

9 months ago

I think I would go with A) as well. It's crucial to follow the principle of least privilege when dealing with sensitive data.

upvoted 0 times

...

Malinda

9 months ago

That's true, but in this case, restricting access through IAM roles is more important to prevent unauthorized queries.

upvoted 0 times

...

Magdalene

9 months ago

Signed URLs? What is this, the Dark Ages? IAM roles are the modern solution for this problem. Keep up with the times, my dude.

upvoted 0 times

Alana

8 months ago

C) Update dataset privileges by using the SQL GRANT statement.

upvoted 0 times

...

Naomi

8 months ago

A) Enable access control by using IAM roles.

upvoted 0 times

...

Yaeko

8 months ago

B) Encrypt the data by using customer-managed encryption keys (CMEK).

upvoted 0 times

...

Colette

9 months ago

A) Enable access control by using IAM roles.

upvoted 0 times

...

Tabetha

9 months ago

But what about option B) Encrypt the data by using customer-managed encryption keys (CMEK)? Wouldn't that add an extra layer of security?

upvoted 0 times

...

Merlyn

9 months ago

Haha, the SQL GRANT statement? That's so 2010. IAM roles are the way to go these days, my friend.

upvoted 0 times

Verdell

8 months ago

D) Export the data to Cloud Storage, and use signed URLs to authorize access.

upvoted 0 times

...

Ria

8 months ago

C) Update dataset privileges by using the SQL GRANT statement.

upvoted 0 times

...

Felicia

9 months ago

B) Encrypt the data by using customer-managed encryption keys (CMEK).

upvoted 0 times

...

Noel

9 months ago

A) Enable access control by using IAM roles.

upvoted 0 times

...

Kent

9 months ago

I agree with Malinda. IAM roles provide fine-grained access control.

upvoted 0 times

...

Diane

9 months ago

I'm torn between A and B. Encryption is also important for protecting customer data, but access control should be the priority here.

upvoted 0 times

Cheryll

9 months ago

User 2: I agree, access control is crucial for protecting sensitive data.

upvoted 0 times

...

Tarra

9 months ago

User 1: I think you should go with A) Enable access control by using IAM roles.

upvoted 0 times

...

Malinda

10 months ago

I think the best option is A) Enable access control by using IAM roles.

upvoted 0 times

...

Marcos

10 months ago

Definitely going with option A. Using IAM roles is the best way to control access to sensitive data in BigQuery.

upvoted 0 times

Tom

9 months ago

Enabling access control with IAM roles is a secure and efficient way to manage data access.

upvoted 0 times

...

Felton

9 months ago

I agree, it's important to follow the principle of least privilege when dealing with customer data.

upvoted 0 times

...

Verdell

9 months ago

IAM roles are definitely the way to go for controlling access to sensitive data in BigQuery.

upvoted 0 times

...