Google Professional Data Engineer Exam - Topic 4 Question 26 Discussion

Actual exam question for Google's Professional Data Engineer exam

Question #: 26
Topic #: 4

[All Professional Data Engineer Questions]

As your organization expands its usage of GCP, many teams have started to create their own projects. Projects are further multiplied to accommodate different stages of deployments and target audiences. Each project requires unique access control configurations. The central IT team needs to have access to all projects. Furthermore, data from Cloud Storage buckets and BigQuery datasets must be shared for use in other projects in an ad hoc way. You want to simplify access control management by minimizing the number of policies. Which two steps should you take? Choose 2 answers.

AUse Cloud Deployment Manager to automate access provision.

BIntroduce resource hierarchy to leverage access control policy inheritance.

CCreate distinct groups for various teams, and specify groups in Cloud IAM policies.

DOnly use service accounts when sharing data for Cloud Storage buckets and BigQuery datasets.

EFor each Cloud Storage bucket or BigQuery dataset, decide which projects need access. Find all the active members who have access to these projects, and create a Cloud IAM policy to grant access to all these users.

Show Suggested Answer

Suggested Answer: A, C

by Simona at May 07, 2022, 08:01 PM

Limited Time Offer

25%

Off

Get Premium Professional Data Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Samira

4 months ago

E sounds overly complicated. Why not just stick to groups?

upvoted 0 times

...

Oliva

4 months ago

B is a must! Inheritance simplifies everything.

upvoted 0 times

...

Casie

4 months ago

Wait, isn't using service accounts (D) a bit risky for access control?

upvoted 0 times

...

Laquita

4 months ago

I think A could work too, but not sure it's the best choice.

upvoted 0 times

...

Socorro

5 months ago

Definitely B and C! Resource hierarchy is key.

upvoted 0 times

...

Geoffrey

5 months ago

I vaguely recall that using service accounts is more about automation than access control. So, I'm not convinced about option D being a good choice here.

upvoted 0 times

...

Avery

5 months ago

I'm not entirely sure, but I feel like creating distinct groups for teams could help manage access better. Option C sounds familiar from our practice questions.

upvoted 0 times

...

Coral

5 months ago

I remember discussing resource hierarchy in class, and it seems like a good way to simplify access control. I think option B might be one of the answers.

upvoted 0 times

...

Armando

5 months ago

I think we talked about minimizing policies, and option E seems too complicated. It might be better to leverage inheritance with option B instead.

upvoted 0 times

...

Odelia

5 months ago

Okay, I think I've got it. Based on the "failed to download" message, it seems like the 'Grandprize.vox' audio file wasn't successfully downloaded, so option A is the correct answer.

upvoted 0 times

...

Alisha

5 months ago

This looks like a straightforward question about service-orientation. I'll focus on understanding the key concepts of separation of concerns and how that relates to the options provided.

upvoted 0 times

...

Hyman

5 months ago

I'm not entirely sure, but removing the Last-Modified header might have been mentioned in class as a reason for discrepancies.

upvoted 0 times

...