Google Associate Data Practitioner Exam - Topic 4 Question 2 Discussion

Actual exam question for Google's Associate Data Practitioner exam

Question #: 2
Topic #: 4

[All Associate Data Practitioner Questions]

You are a data analyst working with sensitive customer data in BigQuery. You need to ensure that only authorized personnel within your organization can query this data, while following the principle of least privilege. What should you do?

AEnable access control by using IAM roles.

BEncrypt the data by using customer-managed encryption keys (CMEK).

CUpdate dataset privileges by using the SQL GRANT statement.

DExport the data to Cloud Storage, and use signed URLs to authorize access.

Show Suggested Answer

Suggested Answer: D

Using IAM roles to enable access control in BigQuery is the best approach to ensure that only authorized personnel can query the sensitive customer data. IAM allows you to define granular permissions at the project, dataset, or table level, ensuring that users have only the access they need in accordance with the principle of least privilege. For example, you can assign roles like roles/bigquery.dataViewer to allow read-only access or roles/bigquery.dataEditor for more advanced permissions. This approach provides centralized and manageable access control, which is critical for protecting sensitive data.

by Isidra at Jan 24, 2025, 12:55 AM

Limited Time Offer

25%

Off

Get Premium Associate Data Practitioner Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maynard

3 months ago

D sounds complicated for just querying data!

upvoted 0 times

...

Dallas

3 months ago

C is useful, but it doesn't cover all access scenarios.

upvoted 0 times

...

Lindsey

3 months ago

Wait, can you really manage access just with IAM roles?

upvoted 0 times

...

Tegan

4 months ago

I think B is more about data security than access control.

upvoted 0 times

...

Kristine

4 months ago

A is definitely the way to go for access control!

upvoted 0 times

...

Celeste

4 months ago

Exporting data to Cloud Storage with signed URLs seems like a workaround, but I don't think it directly addresses the access control needed for querying in BigQuery.

upvoted 0 times

...

Mendy

4 months ago

I'm a bit confused about the SQL GRANT statement. I feel like it might be relevant, but I can't recall if it applies to BigQuery specifically.

upvoted 0 times

...

Raymon

4 months ago

I remember a practice question where we had to manage access to sensitive data, and IAM roles were definitely emphasized as a key solution.

upvoted 0 times

...

Linwood

5 months ago

I think enabling access control with IAM roles is the best option here, but I'm not entirely sure if it covers all aspects of the least privilege principle.

upvoted 0 times

...

Ryan

5 months ago

I'm a little confused on the difference between options A and C. Aren't they both about managing permissions? I'll need to review the details on each one to decide which is the better approach for this scenario.

upvoted 0 times

...

Lawrence

5 months ago

Okay, I think I've got this. The key here is following the principle of least privilege, so I'm leaning towards option A with IAM roles. That way I can really fine-tune the permissions for each authorized user.

upvoted 0 times

...

Edison

5 months ago

Hmm, I'm not sure about this one. I'm thinking option B with customer-managed encryption keys might be the way to go, but I'm not totally confident. I'll need to double-check the details on that.

upvoted 0 times

...

Nickie

5 months ago

This seems pretty straightforward. I'd go with option A and use IAM roles to control access. That way I can grant the least amount of privilege to each user.

upvoted 0 times

...

Karol

1 year ago

I think I would go with A) as well. It's crucial to follow the principle of least privilege when dealing with sensitive data.

upvoted 0 times

...

Malinda

1 year ago

That's true, but in this case, restricting access through IAM roles is more important to prevent unauthorized queries.

upvoted 0 times

...

Magdalene

1 year ago

Signed URLs? What is this, the Dark Ages? IAM roles are the modern solution for this problem. Keep up with the times, my dude.

upvoted 0 times

Alana

11 months ago

C) Update dataset privileges by using the SQL GRANT statement.

upvoted 0 times

...

Naomi

12 months ago

A) Enable access control by using IAM roles.

upvoted 0 times

...

Yaeko

12 months ago

B) Encrypt the data by using customer-managed encryption keys (CMEK).

upvoted 0 times

...

Colette

12 months ago

A) Enable access control by using IAM roles.

upvoted 0 times

...

Tabetha

1 year ago

But what about option B) Encrypt the data by using customer-managed encryption keys (CMEK)? Wouldn't that add an extra layer of security?

upvoted 0 times

...

Merlyn

1 year ago

Haha, the SQL GRANT statement? That's so 2010. IAM roles are the way to go these days, my friend.

upvoted 0 times

Verdell

12 months ago

D) Export the data to Cloud Storage, and use signed URLs to authorize access.

upvoted 0 times

...

Ria

12 months ago

C) Update dataset privileges by using the SQL GRANT statement.

upvoted 0 times

...

Felicia

12 months ago

B) Encrypt the data by using customer-managed encryption keys (CMEK).

upvoted 0 times

...

Noel

12 months ago

A) Enable access control by using IAM roles.

upvoted 0 times

...

Kent

1 year ago

I agree with Malinda. IAM roles provide fine-grained access control.

upvoted 0 times

...

Diane

1 year ago

I'm torn between A and B. Encryption is also important for protecting customer data, but access control should be the priority here.

upvoted 0 times

Cheryll

1 year ago

User 2: I agree, access control is crucial for protecting sensitive data.

upvoted 0 times

...

Tarra

1 year ago

User 1: I think you should go with A) Enable access control by using IAM roles.

upvoted 0 times

...

Malinda

1 year ago

I think the best option is A) Enable access control by using IAM roles.

upvoted 0 times

...

Marcos

1 year ago

Definitely going with option A. Using IAM roles is the best way to control access to sensitive data in BigQuery.

upvoted 0 times

Tom

1 year ago

Enabling access control with IAM roles is a secure and efficient way to manage data access.

upvoted 0 times

...

Felton

1 year ago

I agree, it's important to follow the principle of least privilege when dealing with customer data.

upvoted 0 times

...

Verdell

1 year ago

IAM roles are definitely the way to go for controlling access to sensitive data in BigQuery.

upvoted 0 times

...