Google Professional Data Engineer Question 205
Single answerGoogle Cloud PlatformYou are a data engineer at a company that has multiple datasets in BigQuery containing sensitive customer information. You need to share a subset of the data with an external partner while ensuring compliance with data privacy regulations. How should you publish the dataset securely?
- A
Grant the external partner the 'BigQuery Admin' role on the project containing the datasets.
- B
Create a new dataset, copy only the required tables into it, and grant the external partner 'BigQuery Data Viewer' access to the new dataset.
- C
Use authorized views in BigQuery to expose only the specific rows and columns required, and grant the external partner access to the view.
- D
Export the required data to a Cloud Storage bucket, make the bucket public, and share the link with the external partner.
Show answer and explanation
Correct answer: C
Explanation
To securely publish a subset of data in BigQuery while ensuring compliance with data privacy regulations, authorized views are the preferred method. They allow you to restrict access to specific rows and columns, ensuring that the external partner only sees the data they are permitted to access. This approach also adheres to the principle of least privilege, reducing the risk of data breaches or mismanagement.
- A. Incorrect.
Granting the 'BigQuery Admin' role gives the external partner full control over all datasets in the project, including sensitive information. This violates the principle of least privilege and is not secure.
- B. Incorrect.
Creating a new dataset and copying the required tables involves unnecessary duplication and increases the risk of managing sensitive data incorrectly. While this may work, it is not the most efficient or secure solution.
- C. Correct.
Using authorized views allows you to securely share only the necessary data (specific rows/columns) without exposing the full dataset. It is a best practice for sharing data securely in compliance with privacy regulations.
- D. Incorrect.
Making a Cloud Storage bucket public exposes the data to anyone with the link, which is highly insecure and a violation of data privacy regulations.