Google Professional Data Engineer Question 202
Single answerGoogle Cloud PlatformYou are working as a Data Engineer for a retail company that stores its sales data in BigQuery. The company wants to share a portion of its data with a third-party analytics vendor for analysis while ensuring sensitive customer information, such as email addresses and payment details, is not exposed. Which approach should you take to define the appropriate data-sharing rules?
- A
Create a new BigQuery dataset and copy only the required columns without sensitive data into it. Grant the vendor access to this dataset.
- B
Directly share the entire BigQuery dataset with the vendor and rely on them to filter out sensitive data.
- C
Use BigQuery's row-level security feature to restrict access to specific rows in the dataset based on the vendor's role.
- D
Create a BigQuery view that selects only the non-sensitive columns from the original dataset and share the view with the vendor.
Show answer and explanation
Correct answer: D
Explanation
The best way to share only the required data with the vendor while ensuring sensitive information is not exposed is to create a BigQuery view. A view allows you to define a query that selects only the non-sensitive columns, and you can share this view with the vendor instead of the entire dataset. This approach ensures compliance with data privacy policies and avoids unnecessary data duplication or exposure.
- A. Incorrect.
This approach is possible but may involve unnecessary duplication of data and additional storage costs. A more efficient solution is available using BigQuery views.
- B. Incorrect.
Sharing the entire dataset with the vendor without restrictions exposes sensitive data, violating data privacy and security policies.
- C. Incorrect.
Row-level security controls access to specific rows but does not address the need to exclude certain columns containing sensitive data.
- D. Correct.
Creating a BigQuery view allows you to define a query that selects only non-sensitive columns, ensuring secure and efficient data sharing without duplicating data.