Google Professional Data Engineer Exam - Topic 4 Question 40 Discussion

Actual exam question for Google's Professional Data Engineer exam

Question #: 40
Topic #: 4

[All Professional Data Engineer Questions]

You need to deploy additional dependencies to all of a Cloud Dataproc cluster at startup using an existing initialization action. Company security policies require that Cloud Dataproc nodes do not have access to the Internet so public initialization actions cannot fetch resources. What should you do?

ADeploy the Cloud SQL Proxy on the Cloud Dataproc master

BUse an SSH tunnel to give the Cloud Dataproc cluster access to the Internet

CCopy all dependencies to a Cloud Storage bucket within your VPC security perimeter

DUse Resource Manager to add the service account used by the Cloud Dataproc cluster to the Network User role

Show Suggested Answer

Suggested Answer: D

by Dalene at May 07, 2022, 02:59 AM

Limited Time Offer

25%

Off

Get Premium Professional Data Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Delsie

4 months ago

A and B are definitely not compliant with security policies.

upvoted 0 times

...

Cherri

4 months ago

Wait, why would you use an SSH tunnel? That seems risky!

upvoted 0 times

...

Emerson

4 months ago

I think D could work too, but not sure if it's the best choice.

upvoted 0 times

...

Eladia

4 months ago

Totally agree, option C makes the most sense.

upvoted 0 times

...

Yuette

5 months ago

C is the way to go, keep it all within the VPC!

upvoted 0 times

...

Karan

5 months ago

I’m a bit confused about the service account roles, but I don’t think adding it to the Network User role would help with the initialization action.

upvoted 0 times

...

Mammie

5 months ago

I practiced a similar question about initialization actions, and I think copying dependencies to a Cloud Storage bucket is a solid approach.

upvoted 0 times

...

Nancey

5 months ago

I'm not entirely sure, but I feel like using an SSH tunnel might not align with the security policies, so option B seems risky.

upvoted 0 times

...

Lavonda

5 months ago

I remember we discussed how important it is to keep everything within the VPC for security, so I think option C makes the most sense.

upvoted 0 times

...

Tom

5 months ago

Okay, I've got this. The key is to focus on the specific certificate mentioned in the question, which is the Supervisor Cluster API endpoint certificate. Option A is the correct answer, as the certificate-manager CLI is the tool used to manage that certificate.

upvoted 0 times

...

Trinidad

5 months ago

Okay, let's see here. The error message indicates that HVM is required, so I'm thinking it's likely an issue with the virtualization settings on the server.

upvoted 0 times

...

Claribel

5 months ago

I think the answer is service autonomy. The question is specifically highlighting the importance of reusable services having control over their environment, which aligns with the autonomy principle. I'll go with that.

upvoted 0 times

...