Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Data Engineer Exam - Topic 4 Question 40 Discussion

You need to deploy additional dependencies to all of a Cloud Dataproc cluster at startup using an existing initialization action. Company security policies require that Cloud Dataproc nodes do not have access to the Internet so public initialization actions cannot fetch resources. What should you do?
D) Use Resource Manager to add the service account used by the Cloud Dataproc cluster to the Network User role
A) Deploy the Cloud SQL Proxy on the Cloud Dataproc master
B) Use an SSH tunnel to give the Cloud Dataproc cluster access to the Internet
C) Copy all dependencies to a Cloud Storage bucket within your VPC security perimeter

Google Professional Data Engineer Exam - Topic 4 Question 40 Discussion

Actual exam question for Google's Professional Data Engineer exam
Question #: 40
Topic #: 4
[All Professional Data Engineer Questions]

You need to deploy additional dependencies to all of a Cloud Dataproc cluster at startup using an existing initialization action. Company security policies require that Cloud Dataproc nodes do not have access to the Internet so public initialization actions cannot fetch resources. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Dalene at May 07, 2022, 02:59 AM

Limited Time Offer

25%

Off

Get Premium Professional Data Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Delsie
10 months ago
A and B are definitely not compliant with security policies.
upvoted 0 times
...
Cherri
10 months ago
Wait, why would you use an SSH tunnel? That seems risky!
upvoted 0 times
...
Emerson
11 months ago
I think D could work too, but not sure if it's the best choice.
upvoted 0 times
...
Eladia
11 months ago
Totally agree, option C makes the most sense.
upvoted 0 times
...
Yuette
11 months ago
C is the way to go, keep it all within the VPC!
upvoted 0 times
...
Karan
11 months ago
I’m a bit confused about the service account roles, but I don’t think adding it to the Network User role would help with the initialization action.
upvoted 0 times
...
Mammie
11 months ago
I practiced a similar question about initialization actions, and I think copying dependencies to a Cloud Storage bucket is a solid approach.
upvoted 0 times
...
Nancey
11 months ago
I'm not entirely sure, but I feel like using an SSH tunnel might not align with the security policies, so option B seems risky.
upvoted 0 times
...
Lavonda
11 months ago
I remember we discussed how important it is to keep everything within the VPC for security, so I think option C makes the most sense.
upvoted 0 times
...
Tom
11 months ago
Okay, I've got this. The key is to focus on the specific certificate mentioned in the question, which is the Supervisor Cluster API endpoint certificate. Option A is the correct answer, as the certificate-manager CLI is the tool used to manage that certificate.
upvoted 0 times
...
Trinidad
11 months ago
Okay, let's see here. The error message indicates that HVM is required, so I'm thinking it's likely an issue with the virtualization settings on the server.
upvoted 0 times
...
Claribel
11 months ago
I think the answer is service autonomy. The question is specifically highlighting the importance of reusable services having control over their environment, which aligns with the autonomy principle. I'll go with that.
upvoted 0 times
...

Save Cancel