ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Data Engineer All Questions

View all questions & answers for the Professional Data Engineer exam
Go to Exam

Exam Professional Data Engineer topic 1 question 240 discussion

Actual exam question from Google's Professional Data Engineer
Question #: 240
Topic #: 1
[All Professional Data Engineer Questions]

You are designing a data mesh on Google Cloud by using Dataplex to manage data in BigQuery and Cloud Storage. You want to simplify data asset permissions. You are creating a customer virtual lake with two user groups:

• Data engineers, which require full data lake access
• Analytic users, which require access to curated data

You need to assign access rights to these two groups. What should you do?

  • A. 1. Grant the dataplex.dataOwner role to the data engineer group on the customer data lake.
    2. Grant the dataplex.dataReader role to the analytic user group on the customer curated zone.
  • B. 1. Grant the dataplex.dataReader role to the data engineer group on the customer data lake.
    2. Grant the dataplex.dataOwner to the analytic user group on the customer curated zone.
  • C. 1. Grant the bigquery.dataOwner role on BigQuery datasets and the storage.objectCreator role on Cloud Storage buckets to data engineers.
    2. Grant the bigquery.dataViewer role on BigQuery datasets and the storage.objectViewer role on Cloud Storage buckets to analytic users.
  • D. 1. Grant the bigquery.dataViewer role on BigQuery datasets and the storage.objectViewer role on Cloud Storage buckets to data engineers.
    2. Grant the bigquery.dataOwner role on BigQuery datasets and the storage.objectEditor role on Cloud Storage buckets to analytic users.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by scaenruy at Jan. 3, 2024, 2:05 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
raaad
Highly Voted 1 year, 4 months ago
Selected Answer: A
- dataplex.dataOwner: Grants full control over data assets, including reading, writing, managing, and granting access to others. - dataplex.dataReader: Allows users to read data but not modify it.
upvoted 9 times
AllenChen123
1 year, 3 months ago
Yes, https://cloud.google.com/dataplex/docs/lake-security#data-roles Dataplex maps its roles to the data roles for each underlying storage resource (Cloud Storage, BigQuery). ^ simplify the permissions.
upvoted 4 times
...
...
josech
Most Recent 11 months, 2 weeks ago
Selected Answer: C
The quetion is for BigQuery AND Cloud Storage for a Data Lake, so you should assign IAM permissions for both of them. C is correct.
upvoted 1 times
[Removed]
9 months, 3 weeks ago
Dataplex roles are mapped to roles for the underlying resources, like BQ and GCS. So A and C are functionally (almost) equivalent, but A is simpler (2 roles rather than 4). See https://cloud.google.com/dataplex/docs/lake-security#data-roles
upvoted 2 times
...
...
JyoGCP
1 year, 2 months ago
Selected Answer: A
Option A
upvoted 1 times
...
qq589539483084gfrgrgfr
1 year, 3 months ago
Selected Answer: A
A correct answer
upvoted 3 times
...
Matt_108
1 year, 3 months ago
Selected Answer: A
Option A clearly correct
upvoted 2 times
...
scaenruy
1 year, 4 months ago
Selected Answer: A
A. 1. Grant the dataplex.dataOwner role to the data engineer group on the customer data lake. 2. Grant the dataplex.dataReader role to the analytic user group on the customer curated zone.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago