Google Professional Data Engineer Exam - Topic 3 Question 18 Discussion

Actual exam question for Google's Professional Data Engineer exam

Question #: 18
Topic #: 3

[All Professional Data Engineer Questions]

Data Analysts in your company have the Cloud IAM Owner role assigned to them in their projects to allow them to work with multiple GCP products in their projects. Your organization requires that all BigQuery data access logs be retained for 6 months. You need to ensure that only audit personnel in your company can access the data access logs for all projects. What should you do?

AEnable data access logs in each Data Analyst's project. Restrict access to Stackdriver Logging via Cloud IAM roles.

BExport the data access logs via a project-level export sink to a Cloud Storage bucket in the Data Analysts' projects. Restrict access to the Cloud Storage bucket.

CExport the data access logs via a project-level export sink to a Cloud Storage bucket in a newly created projects for audit logs. Restrict access to the project with the exported logs.

DExport the data access logs via an aggregated export sink to a Cloud Storage bucket in a newly created project for audit logs. Restrict access to the project that contains the exported logs.

Show Suggested Answer

Suggested Answer: D

by Virgina at May 07, 2022, 11:19 AM

Limited Time Offer

25%

Off

Get Premium Professional Data Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Donette

4 months ago

Exporting to a new project? That sounds complicated!

upvoted 0 times

...

Kallie

4 months ago

Definitely not A, we need tighter control over those logs.

upvoted 0 times

...

Sheridan

4 months ago

Wait, why not just use option A? Seems simpler.

upvoted 0 times

...

Emilio

4 months ago

I agree, keeping audit logs in a separate project is smart!

upvoted 0 times

...

Alishia

5 months ago

Option C seems like the best choice for restricting access.

upvoted 0 times

...

Samira

5 months ago

I practiced a similar question, and I think restricting access to a separate project for logs is crucial. So, I lean towards option C or D.

upvoted 0 times

...

Avery

5 months ago

I feel like option D makes sense since it mentions an aggregated export sink, which might be more efficient for audit purposes.

upvoted 0 times

...

Allene

5 months ago

I'm not entirely sure, but I remember something about using export sinks for logs. Could option B be a good way to restrict access?

upvoted 0 times

...

Buck

5 months ago

I think we need to ensure that the logs are centralized for better access control, so maybe option C or D could be the right choice.

upvoted 0 times

...

Paola

5 months ago

This one seems pretty straightforward. I'm pretty sure the answer is D - exploit.

upvoted 0 times

...

Corrina

5 months ago

Okay, the key detail here is that the data is copied automatically to a second disk. That sounds like RAID 1 to me, where data is mirrored across two disks.

upvoted 0 times

...

Erinn

5 months ago

This seems like a straightforward question about the components of attitude. I'm pretty confident I can identify the correct answer here.

upvoted 0 times

...

Benedict

5 months ago

I feel like questions to validate the analytical data could really help clarify any misunderstandings before the meeting, right?

upvoted 0 times

...

Paris

5 months ago

Okay, I see the YANG structure in the exhibit. I think the correct xpath is /ncs:services/abc_service/CustomerA/ios-device. The "ncs:" prefix indicates a namespace, and the element names match what's shown.

upvoted 0 times

...

Nenita

5 months ago

This requires remembering specific establishment dates. I'll eliminate those I'm sure were in that period and then choose carefully.

upvoted 0 times

...