Google Professional Data Engineer Question 204
Select 3Google Cloud PlatformYou are a data engineer at a retail company and manage a dataset in BigQuery containing sensitive customer information. You need to publish a subset of this dataset for external analysts to access, ensuring that no sensitive information is exposed. What steps should you take to securely publish this dataset?
- A
Use authorized views to expose only the required subset of data.
- B
Grant the BigQuery Data Viewer role to external analysts on the entire dataset.
- C
Create a new table containing only the required data and share it directly with external analysts.
- D
Apply column-level security to restrict access to sensitive columns in the published dataset.
- E
Use Data Loss Prevention (DLP) to de-identify sensitive data before publishing the dataset.
Show answer and explanation
Correct answers: A, D, E
Explanation
To securely publish a dataset containing sensitive information, it is important to minimize exposure while maintaining data usability. Authorized views allow controlled access to a specific subset of data. Column-level security further restricts access to sensitive columns within the dataset. Additionally, using Data Loss Prevention (DLP) to de-identify sensitive information ensures compliance with privacy regulations and protects against unintentional exposure of sensitive data. These steps collectively ensure secure and compliant data publishing.
- A. Correct.
Using authorized views is a best practice for sharing only the necessary subset of data securely. It allows you to control exactly what data is exposed without giving direct access to the underlying dataset.
- B. Incorrect.
Granting the BigQuery Data Viewer role on the entire dataset is not secure because it exposes all the data, including sensitive information, which violates data governance and privacy best practices.
- C. Incorrect.
Creating a new table with the required data and sharing it could work, but it does not inherently enforce security over sensitive columns. This approach also introduces duplication and potential challenges in keeping the new table up-to-date.
- D. Correct.
Applying column-level security ensures that sensitive columns remain inaccessible to unauthorized users, making this an effective measure when publishing datasets securely.
- E. Correct.
Using Data Loss Prevention (DLP) to de-identify sensitive data is a critical step to ensure privacy and compliance when publishing datasets, especially when sensitive columns must still be included in the dataset.