Google Exam Professional Cloud Security Engineer Topic 3 Question 82 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 82
Topic #: 3

[All Professional Cloud Security Engineer Questions]

Your company's users access data in a BigQuery table. You want to ensure they can only access the data during working hours.

What should you do?

AAssign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

BConfigure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.

CAssign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours

DRun a gsuttl script that assigns a BigQuery Data Viewer role, and remove it only during the specified working hours.

Show Suggested Answer

Suggested Answer: A

by Vallie at Jul 01, 2024, 08:03 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Denny

5 months ago

B) Cloud Functions, huh? I bet the engineers had a field day coding that one up. Gotta love that tech-savvy approach!

upvoted 0 times

...

An

5 months ago

A) The 1AM condition is a nice touch. Keeps things simple and secure. I like it!

upvoted 0 times

Shayne

4 months ago

Definitely, keeping it simple and secure with that condition is a smart move.

upvoted 0 times

...

Lindsey

4 months ago

I agree, the 1AM condition makes it easy to control access during specific times.

upvoted 0 times

...

Lynette

4 months ago

I think option A is the best choice. It assigns the role with a condition for working hours.

upvoted 0 times

...

Marge

4 months ago

A) The 1AM condition is a nice touch. Keeps things simple and secure. I like it!

upvoted 0 times

...

Annelle

4 months ago

B) Configure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.

upvoted 0 times

...

Aliza

4 months ago

A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

upvoted 0 times

...

Olene

5 months ago

I personally think option D is the most secure option, as it assigns and removes roles only during specified working hours.

upvoted 0 times

...

Chandra

5 months ago

I see your point, Carline. But I think option C is also a good choice as it adds and removes users daily during working hours.

upvoted 0 times

...

Frederica

5 months ago

D) A script? Seriously? That's like using a sledgehammer to crack a nut. Efficiency is key, people!

upvoted 0 times

Glendora

4 months ago

D) A script? Seriously? That's like using a sledgehammer to crack a nut. Efficiency is key, people!

upvoted 0 times

...

Ellsworth

4 months ago

C) Assign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours

upvoted 0 times

...

Teri

5 months ago

B) Configure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraints for BigQuery during the specified working hours.

upvoted 0 times

...

Flo

5 months ago

A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

upvoted 0 times

...

Carline

5 months ago

I disagree, I believe option B is more efficient as it automates the process using Cloud Scheduler and Cloud Functions.

upvoted 0 times

...

Ozell

5 months ago

C) Manually adding and removing users? That sounds like a lot of work. Is there an easier way to do this?

upvoted 0 times

...

Frank

5 months ago

I think option A is the best choice because it allows us to limit access to specified working hours.

upvoted 0 times

...

Latricia

5 months ago

B) Ooh, using Cloud Functions to automate the policy changes? That's some next-level stuff right there!

upvoted 0 times

Leeann

4 months ago

B) Ooh, using Cloud Functions to automate the policy changes? That's some next-level stuff right there!

upvoted 0 times

...

Melynda

4 months ago

A) Assign a BigQuery Data Viewer role along with an 1AM condition that limits the access to specified working hours.

upvoted 0 times

...

Emeline

6 months ago

A) Seems like the most straightforward approach. No need to mess with Schedulers or scripts.

upvoted 0 times

Jani

5 months ago

Yeah, it seems like the simplest solution.

upvoted 0 times

...

Viola

5 months ago

I think option A is the best choice.

upvoted 0 times

...