Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Security Engineer Exam - Topic 1 Question 74 Discussion

Your company's users access data in a BigQuery table. You want to ensure they can only access the data during working hours.What should you do?
A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.
B) Configure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.
C) Assign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours
D) Run a gsuttl script that assigns a BigQuery Data Viewer role, and remove it only during the specified working hours.

Google Professional Cloud Security Engineer Exam - Topic 1 Question 74 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 74
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your company's users access data in a BigQuery table. You want to ensure they can only access the data during working hours.

What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Minna at Mar 17, 2024, 12:46 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Linette
7 months ago
D sounds risky, what if the script fails?
upvoted 0 times
...
Ammie
8 months ago
C is too complicated, just keep it simple with A.
upvoted 0 times
...
Geoffrey
8 months ago
Wait, can we really automate role changes like that?
upvoted 0 times
...
Johnathon
8 months ago
I disagree, B seems more flexible with Cloud Scheduler.
upvoted 0 times
...
Shannan
8 months ago
Option A sounds right, IAM conditions are perfect for this!
upvoted 0 times
...
Raul
9 months ago
Option D seems like it could work, but I’m not confident about using gsutil for this purpose. I thought we were supposed to focus on IAM roles instead.
upvoted 0 times
...
Franklyn
9 months ago
I'm leaning towards option C, but it seems a bit complicated to manage user access daily. I wonder if there's a simpler way.
upvoted 0 times
...
Jamie
9 months ago
I remember practicing a question similar to this, and I feel like using Cloud Scheduler could be a good approach, but I can't recall the details.
upvoted 0 times
...
Aracelis
9 months ago
I think option A sounds familiar because we discussed IAM conditions in class, but I'm not entirely sure if they can limit access by time.
upvoted 0 times
...
Tabetha
9 months ago
This is an interesting question. I'll need to explore the different options and make sure I understand how to properly configure the access policies and scheduling to meet the requirements.
upvoted 0 times
...
Tommy
9 months ago
I'm feeling pretty confident about this one. I've worked with similar access control and scheduling challenges before, so I think I can come up with a solid solution.
upvoted 0 times
...
Chanel
9 months ago
Okay, I think I've got a strategy for this. I'll focus on using the access control features in BigQuery to limit the data access to the specified working hours.
upvoted 0 times
...
Bronwyn
9 months ago
Hmm, I'm a bit unsure about this one. I'll need to review the details on how to set up access controls and time-based policies in BigQuery.
upvoted 0 times
...
Dion
9 months ago
This seems like a tricky one. I'll need to carefully consider the different options and think through the pros and cons of each approach.
upvoted 0 times
...
Celia
9 months ago
Wait, I'm confused. If the script name is the first argument, shouldn't the value of $# be 4? I need to double-check my understanding of how the $# variable works.
upvoted 0 times
...
Vanna
9 months ago
Hmm, I'm a bit unsure about the exact steps here. I'll need to carefully read through the options to make sure I understand the right way to insert the page break.
upvoted 0 times
...
Jenelle
2 years ago
I think option C could work too, assigning a BigQuery Data Viewer role to a service account that adds and removes users daily.
upvoted 0 times
...
Ty
2 years ago
I agree with Michal, option A sounds simpler and more straightforward.
upvoted 0 times
...
Tamar
2 years ago
I disagree, I believe option B is the best choice. Configuring Cloud Scheduler to trigger Cloud Functions seems more efficient.
upvoted 0 times
...
Michal
2 years ago
I think we should go with option A, assigning a BigQuery Data Viewer role along with a 1AM condition.
upvoted 0 times
...
Meaghan
2 years ago
But what if we need a more automated solution? Option B might be the way to go for that.
upvoted 0 times
...
Nohemi
2 years ago
I'm leaning towards option C. Assigning a BigQuery Data Viewer role to a service account that handles user management daily seems practical.
upvoted 0 times
...
Nickie
2 years ago
I disagree, I believe option B is more efficient. Using Cloud Scheduler to trigger Cloud Functions for policy modification is a better approach.
upvoted 0 times
...
Meaghan
2 years ago
I think option A is the best choice. Assigning a BigQuery Data Viewer role along with a time condition makes sense.
upvoted 0 times
...
Susy
2 years ago
Option D with the gsuttl script sounds interesting, but I'm not sure how reliable that would be. Imagine if someone forgets to run the script, then we'd have a security breach!
upvoted 0 times
...
Isadora
2 years ago
I'm leaning towards Option C. Using a service account to add and remove users daily during the specified hours seems like a simpler approach. Plus, we can easily manage the access that way.
upvoted 0 times
...
Alfred
2 years ago
I agree, Grover. Option A looks like it might work, but I'm not sure how to set up that 1AM condition. Option B sounds a bit complicated with the Cloud Functions and Scheduler.
upvoted 0 times
Raul
2 years ago
D) Run a gsuttl script that assigns a BigQuery Data Viewer role, and remove it only during the specified working hours.
upvoted 0 times
...
Talia
2 years ago
I think setting up that 1AM condition shouldn't be too difficult.
upvoted 0 times
...
Nichelle
2 years ago
A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.
upvoted 0 times
...
Maynard
2 years ago
That could work too, but it might be a manual process daily.
upvoted 0 times
...
Malcolm
2 years ago
C) Assign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours.
upvoted 0 times
...
Dulce
2 years ago
Option A seems like the easiest solution.
upvoted 0 times
...
Twanna
2 years ago
A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.
upvoted 0 times
...
...
Grover
2 years ago
You know, with all these options, I'm starting to feel like we're playing a game of 'Guess the Correct Answer'. I wish the question was a little more straightforward.
upvoted 0 times
...

Save Cancel