Google Exam Professional Cloud Security Engineer Topic 4 Question 106 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 106
Topic #: 4

[All Professional Cloud Security Engineer Questions]

Your organization uses BigQuery to process highly sensitive, structured datasets. Following the "need to know" principle, you need to create the Identity and Access Management (IAM) design to meet the needs of these users:

* Business user must access curated reports.

* Data engineer: must administrate the data lifecycle in the platform.

* Security operator: must review user activity on the data platform.

What should you do?

AConfigure data access log for BigQuery services, and grant Project Viewer role to security operators.

BGenerate a CSV data file based on the business user's needs, and send the data to their email addresses.

CCreate curated tables in a separate dataset and assign the role roles/bigquery.dataViewer.

DSet row-based access control based on the 'region' column, and filter the record from the United States for data engineers.

Show Suggested Answer

Suggested Answer: C

This option directly addresses the needs of the business user who must access curated reports. By creating curated tables in a separate dataset, you can control access to specific data. Assigning the roles/bigquery.dataViewer role allows the business user to view the data in BigQuery.

by Carmela at Jul 31, 2025, 04:08 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Karon

4 days ago

A is a good start, but I think we need more granular control over who can access the sensitive data. C looks like the best solution to me.

upvoted 0 times

...

Dell

5 days ago

Option C seems like the way to go. Separating the curated data into a dedicated dataset and granting the appropriate roles is a clean and secure approach.

upvoted 0 times

Mindy

16 hours ago

Option C seems like the way to go. Separating the curated data into a dedicated dataset and granting the appropriate roles is a clean and secure approach.

upvoted 0 times

...