Google Exam Professional Cloud Security Engineer Topic 1 Question 84 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 84
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your company's users access data in a BigQuery table. You want to ensure they can only access the data during working hours.

What should you do?

AAssign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

BConfigure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.

CAssign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours

DRun a gsuttl script that assigns a BigQuery Data Viewer role, and remove it only during the specified working hours.

Show Suggested Answer

Suggested Answer: A

by Miesha at Jul 17, 2024, 09:08 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dalene

4 months ago

Hold up, did you say 'gsuttl' script? Is that like a new kind of space-age tool or something?

upvoted 0 times

...

Tiffiny

4 months ago

Option D with a gsutil script? Really? That's like using a sledgehammer to crack a nut.

upvoted 0 times

...

Luis

4 months ago

Option C with a service account managing access is a creative approach, but it might be overly complex.

upvoted 0 times

Wilbert

2 months ago

Option C with a service account managing access is a creative approach, but it might be overly complex.

upvoted 0 times

...

Norah

3 months ago

C) Assign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours

upvoted 0 times

...

Tori

3 months ago

B) Configure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.

upvoted 0 times

...

Clorinda

3 months ago

A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

upvoted 0 times

...

Georgiann

4 months ago

Option B with Cloud Scheduler and Cloud Functions sounds a bit overkill for this simple use case.

upvoted 0 times

...

Zoila

4 months ago

Option A seems like a straightforward solution. Limiting access to working hours is a good security practice.

upvoted 0 times

Louann

3 months ago

Yeah, it's a simple and effective solution for ensuring data access only during working hours.

upvoted 0 times

...

Selma

4 months ago

I think option A is the best choice. It limits access to working hours.

upvoted 0 times

...

Verda

4 months ago

I think option D is the way to go. Running a script to assign and remove roles seems straightforward.

upvoted 0 times

...

Cordelia

4 months ago

I prefer option C. It adds and removes users daily, ensuring access only during working hours.

upvoted 0 times

...

Lacresha

4 months ago

I disagree, I believe option B is more efficient. Cloud Scheduler can automate the process.

upvoted 0 times

...

Francesco

4 months ago

I think option A is the best choice. It limits access to specified working hours.

upvoted 0 times

...