🔥 40% Off Crucial Exams Memberships — Deal ends today!

9 minutes, 54 seconds remaining!
Crucial Exams

GCP Professional Cloud Architect Practice Question

A fintech company must allow a group of external contractors to run read-only queries against tables in the prod_finance BigQuery dataset for a two-week audit. Queries are permitted only when the request originates from the company's on-premises public subnet 198.51.100.0/24, and access must automatically expire at 23:59 UTC on 15 June 2025. The solution should follow the principle of least privilege and avoid granting broader project-level permissions. How should you configure access?

  • Grant the contractors the BigQuery Data Viewer role on the prod_finance dataset with an IAM condition that allows access only until timestamp("2025-06-15T23:59:59Z"). Create a VPC Service Controls perimeter for the project and add an ingress rule permitting access exclusively from 198.51.100.0/24.

  • Expose BigQuery through Identity-Aware Proxy (IAP), configure an access level for the 198.51.100.0/24 subnet, and grant the contractors BigQuery User on the project for the duration of the audit.

  • Grant a custom IAM role containing only bigquery.jobs.create on the prod_finance dataset with an IAM condition that evaluates request.ip and request.time.

  • Grant the contractors the BigQuery User role on the entire project and rely on VPC Service Controls to restrict access to 198.51.100.0/24.

GCP Professional Cloud Architect
Designing for security and compliance
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot