Google Professional Data Engineer Question 170
Select 2Google Cloud PlatformA global retail company wants to segment its sales data in BigQuery for distributed team usage. The company has regional teams in North America, Europe, and Asia, each needing access only to their region's data for compliance reasons. What is the best approach to achieve this using Google Cloud technologies?
- A
Create separate BigQuery datasets for each region and grant access to the appropriate regional teams.
- B
Use BigQuery row-level security (RLS) to filter data for each region and assign policies to the respective teams.
- C
Export the data for each region into regional buckets in Cloud Storage and provide team-specific access to the buckets.
- D
Use BigQuery authorized views to filter data for each region and share the views with the respective teams.
Show answer and explanation
Correct answers: B, D
Explanation
To segment data for distributed team usage in compliance with regional access requirements, the best approaches are BigQuery row-level security (RLS) and authorized views. RLS enables fine-grained access control at the row level, while authorized views allow data filtering and sharing with specific teams. These methods leverage BigQuery's native features for efficient and secure data segmentation, ensuring scalability and ease of management.
- A. Incorrect.
Creating separate datasets for each region is not the most efficient or scalable solution. It introduces overhead in managing multiple datasets and does not leverage BigQuery's powerful access control features.
- B. Correct.
BigQuery row-level security (RLS) allows fine-grained access control by filtering rows of data based on conditions. This is an effective solution for ensuring that each team only accesses data relevant to their region.
- C. Incorrect.
Exporting the data into regional Cloud Storage buckets is not an optimal solution for managing analytical workloads. It disconnects the data from BigQuery's analytical capabilities, making it harder to query and manage.
- D. Correct.
BigQuery authorized views are a recommended approach for segmenting data. They allow you to create views that filter data based on region and share only the view with the respective teams, ensuring compliance and security.