Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Data Engineer Exam - Topic 3 Question 18 Discussion

Data Analysts in your company have the Cloud IAM Owner role assigned to them in their projects to allow them to work with multiple GCP products in their projects. Your organization requires that all BigQuery data access logs be retained for 6 months. You need to ensure that only audit personnel in your company can access the data access logs for all projects. What should you do?
D) Export the data access logs via an aggregated export sink to a Cloud Storage bucket in a newly created project for audit logs. Restrict access to the project that contains the exported logs.
A) Enable data access logs in each Data Analyst's project. Restrict access to Stackdriver Logging via Cloud IAM roles.
B) Export the data access logs via a project-level export sink to a Cloud Storage bucket in the Data Analysts' projects. Restrict access to the Cloud Storage bucket.
C) Export the data access logs via a project-level export sink to a Cloud Storage bucket in a newly created projects for audit logs. Restrict access to the project with the exported logs.

Google Professional Data Engineer Exam - Topic 3 Question 18 Discussion

Actual exam question for Google's Professional Data Engineer exam
Question #: 18
Topic #: 3
[All Professional Data Engineer Questions]

Data Analysts in your company have the Cloud IAM Owner role assigned to them in their projects to allow them to work with multiple GCP products in their projects. Your organization requires that all BigQuery data access logs be retained for 6 months. You need to ensure that only audit personnel in your company can access the data access logs for all projects. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Virgina at May 07, 2022, 11:19 AM

Limited Time Offer

25%

Off

Get Premium Professional Data Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Donette
10 months ago
Exporting to a new project? That sounds complicated!
upvoted 0 times
...
Kallie
10 months ago
Definitely not A, we need tighter control over those logs.
upvoted 0 times
...
Sheridan
11 months ago
Wait, why not just use option A? Seems simpler.
upvoted 0 times
...
Emilio
11 months ago
I agree, keeping audit logs in a separate project is smart!
upvoted 0 times
...
Alishia
11 months ago
Option C seems like the best choice for restricting access.
upvoted 0 times
...
Samira
11 months ago
I practiced a similar question, and I think restricting access to a separate project for logs is crucial. So, I lean towards option C or D.
upvoted 0 times
...
Avery
11 months ago
I feel like option D makes sense since it mentions an aggregated export sink, which might be more efficient for audit purposes.
upvoted 0 times
...
Allene
11 months ago
I'm not entirely sure, but I remember something about using export sinks for logs. Could option B be a good way to restrict access?
upvoted 0 times
...
Buck
11 months ago
I think we need to ensure that the logs are centralized for better access control, so maybe option C or D could be the right choice.
upvoted 0 times
...
Paola
11 months ago
This one seems pretty straightforward. I'm pretty sure the answer is D - exploit.
upvoted 0 times
...
Corrina
11 months ago
Okay, the key detail here is that the data is copied automatically to a second disk. That sounds like RAID 1 to me, where data is mirrored across two disks.
upvoted 0 times
...
Erinn
11 months ago
This seems like a straightforward question about the components of attitude. I'm pretty confident I can identify the correct answer here.
upvoted 0 times
...
Benedict
11 months ago
I feel like questions to validate the analytical data could really help clarify any misunderstandings before the meeting, right?
upvoted 0 times
...
Paris
11 months ago
Okay, I see the YANG structure in the exhibit. I think the correct xpath is /ncs:services/abc_service/CustomerA/ios-device. The "ncs:" prefix indicates a namespace, and the element names match what's shown.
upvoted 0 times
...
Nenita
11 months ago
This requires remembering specific establishment dates. I'll eliminate those I'm sure were in that period and then choose carefully.
upvoted 0 times
...

Save Cancel