MENU
Your organization uses BigQuery to process highly sensitive, structured datasets. Following the "need to know" principle, you need to create the Identity and Access Management (IAM) design to meet the needs of these users:
* Business user must access curated reports.
* Data engineer: must administrate the data lifecycle in the platform.
* Security operator: must review user activity on the data platform.
What should you do?
Suggested Answer: C
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
This option directly addresses the needs of the business user who must access curated reports. By creating curated tables in a separate dataset, you can control access to specific data. Assigning the roles/bigquery.dataViewer role allows the business user to view the data in BigQuery.
23 comments · newest first
BR
Brandon
10 months ago
I disagree, D is too restrictive for data engineers.
DA
Dahlia
10 months ago
I think C is the best choice for business users.
KR
Kristian
11 months ago
Wait, sending CSVs via email? That seems risky!
CA
Cammy
11 months ago
A and C together could really cover all bases!
JE
Jesus
11 months ago
Option A sounds solid for security operators.
NA
Narcisa
11 months ago
I'm a bit confused about option D; I know row-based access control is important, but I'm not sure if filtering by region is the right way to handle access for data engineers.
AN
Angella
11 months ago
I feel like option A could be relevant since it mentions configuring data access logs, which we covered in a practice question about monitoring user activity.
MA
Marylin
12 months ago
I think option C sounds familiar because we practiced creating curated tables and assigning roles, but I can't recall if that's the best approach for security operators.
ME
Melinda
12 months ago
I remember we discussed the importance of the "need to know" principle in our last study session, but I'm not sure which option best aligns with that.
RO
Rodney
1 year ago
I've got a strategy in mind. I'll need to set up the necessary permissions and access controls to meet the needs of each user, while also ensuring the "need to know" principle is upheld. Time to put my BigQuery IAM knowledge to the test!
AN
Annamae
1 year ago
Okay, let's see. I need to create an IAM design that grants the appropriate access for the business user, data engineer, and security operator. I'll need to review the access control options in BigQuery to determine the best approach.
AL
Alease
1 year ago
Hmm, I'm a bit unsure about this one. There are a few options that seem plausible, but I'll need to carefully consider the requirements for each user type.
SH
Shaniqua
1 year ago
This question seems straightforward. I think the key is to focus on the different user roles and their access needs.
AR
Arminda
1 year ago
Wait, we're not supposed to send sensitive data via email? That's news to me! Just kidding, C is the clear winner here.
NE
Nelida
1 year ago
D sounds interesting, but row-level access control might be overkill for this use case. I'd go with C as well.
MA
Mable
1 year ago
Haha, sending the data to their email? That's a security nightmare waiting to happen. C is definitely the way to go here.
MA
Marci
1 year ago
A) Configure data access log for BigQuery services, and grant Project Viewer role to security operators.
KA
Karon
1 year ago
A is a good start, but I think we need more granular control over who can access the sensitive data. C looks like the best solution to me.
FR
Freeman
1 year ago
A) Configure data access log for BigQuery services, and grant Project Viewer role to security operators.
DE
Dell
1 year ago
Option C seems like the way to go. Separating the curated data into a dedicated dataset and granting the appropriate roles is a clean and secure approach.
LO
Lorean
1 year ago
Definitely. It helps maintain data security and control access effectively.
TA
Taryn
1 year ago
That makes sense. It's important to ensure that the right users have access to the right data.
MI
Mindy
1 year ago
Option C seems like the way to go. Separating the curated data into a dedicated dataset and granting the appropriate roles is a clean and secure approach.