Google Cloud Professional Data Engineer — Question 25

Your company handles data processing for a number of different clients. Each client prefers to use their own suite of analytics tools, with some allowing direct query access via Google BigQuery. You need to secure the data so that clients cannot see each other's data. You want to ensure appropriate access to the data.
Which three steps should you take? (Choose three.)

Answer options

• A. Load data into different partitions.
• B. Load data into a different dataset for each client.
• C. Put each client's BigQuery dataset into a different table.
• D. Restrict a client's dataset to approved users.
• E. Only allow a service account to access the datasets.
• F. Use the appropriate identity and access management (IAM) roles for each client's users.

Correct answer: B, D, F

Explanation

The correct answers are B, D, and F because creating separate datasets for each client ensures data isolation, restricting access to approved users safeguards sensitive information, and using appropriate IAM roles allows for precise control over who can access specific datasets. Options A, C, and E do not provide sufficient isolation or access control for each client's data.