Google Professional Data Engineer Question 61
Select 3Google Cloud PlatformYou are designing a data architecture in Google Cloud for an organization that handles sensitive customer data. The architecture must ensure proper data governance, including access control and compliance with privacy regulations. How should you structure your project, datasets, and tables to meet these requirements?
- A
Create separate datasets for each department and assign IAM roles at the dataset level based on the department's access needs.
- B
Use table-level access controls to restrict access to sensitive columns containing personally identifiable information (PII).
- C
Store all data in a single dataset and manage access control at the project level for simplicity.
- D
Enable the BigQuery Data Catalog and define tags for datasets containing sensitive information to ensure discoverability and governance.
- E
Use Cloud Storage instead of BigQuery for sensitive data to avoid the need for dataset or table-level governance.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure proper data governance, you should structure your BigQuery architecture by creating logical boundaries using datasets for different departments, applying fine-grained access controls, and leveraging tools like the BigQuery Data Catalog to tag and manage sensitive datasets. These measures help enforce privacy regulations and maintain data security while ensuring accessibility for appropriate users.
- A. Correct.
Correct: Creating separate datasets for each department ensures a clear boundary for data ownership and access control, aligning with best practices for data governance.
- B. Correct.
Correct: Table-level access controls in BigQuery allow you to implement fine-grained access restrictions, especially for sensitive columns, ensuring compliance with privacy regulations.
- C. Incorrect.
Incorrect: Storing all data in a single dataset and managing access at the project level is not ideal as it lacks granularity and increases the risk of improper data governance.
- D. Correct.
Correct: Enabling BigQuery Data Catalog and using tags to categorize sensitive datasets enhances discoverability and ensures proper governance through metadata management.
- E. Incorrect.
Incorrect: While Cloud Storage is a viable option for data storage, it does not inherently provide the table-level governance features required for structured data stored in BigQuery.