ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 325 - Professional Data Engineer discussion

Report
Export

You have a BigQuery table that contains customer data, including sensitive information such as names and addresses. You need to share the customer data with your data analytics and consumer support teams securely. The data analytics team needs to access the data of all the customers, but must not be able to access the sensitive data. The consumer support team needs access to all data columns, but must not be able to access customers that no longer have active contracts. You enforced these requirements by using an authorized dataset and policy tags After implementing these steps, the data analytics team reports that they still have access to the sensitive columns. You need to ensure that the data analytics team does not have access to restricted data What should you do?

Choose 2 answers

A.
Create two separate authorized datasets; one for the data analytics team and another for the consumer support team.
Answers
A.
Create two separate authorized datasets; one for the data analytics team and another for the consumer support team.
B.
Ensure that the data analytics team members do not have the Data Catalog Fine-Grained Reader role for the policy tags.
Answers
B.
Ensure that the data analytics team members do not have the Data Catalog Fine-Grained Reader role for the policy tags.
C.
Enforce access control in the policy tag taxonomy.
Answers
C.
Enforce access control in the policy tag taxonomy.
D.
Remove the bigquery. dataViewer role from the data analytics team on the authorized datasets.
Answers
D.
Remove the bigquery. dataViewer role from the data analytics team on the authorized datasets.
E.
Replace the authorized dataset with an authorized view Use row-level security and apply filter_ expression to limit data access.
Answers
E.
Replace the authorized dataset with an authorized view Use row-level security and apply filter_ expression to limit data access.
Suggested answer: B, C

Explanation:

To ensure that the data analytics team does not have access to sensitive columns, you should:

B) Ensure that the data analytics team members do not have the Data Catalog Fine-Grained Reader role for the policy tags.This role allows users to read metadata for data assets that have policy tags applied, which could include sensitive information.

C) Enforce access control in the policy tag taxonomy.By setting access control at the policy tag level, you can restrict access to specific columns within a dataset, ensuring that only authorized users can view sensitive data.

asked 18/09/2024
Carlo Hearne
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first