GCP Professional Data Engineer Practice Question

A global retailer is consolidating analytics workloads on Google Cloud. Raw transaction logs land in project-specific Cloud Storage buckets, while curated tables are loaded into BigQuery datasets owned by each business domain. The chief data office must be able to discover every data set, apply uniform data quality checks, and enforce consistent IAM and encryption policies across both storage systems-without forcing domains to relocate data or manage extra infrastructure. Which design best meets these requirements with the least operational overhead?

Enable BigLake on every Cloud Storage bucket and create corresponding external tables in BigQuery; manage access with table-level ACLs and per-project IAM policies.
Rely on Data Catalog to tag all Cloud Storage objects and BigQuery tables; trigger Cloud Functions that check tags and rewrite IAM policies whenever a resource changes.
Create a Dataplex lake for the enterprise and define separate zones for each business domain; register their Cloud Storage buckets and BigQuery datasets as assets and apply central governance, quality, and security policies through Dataplex.
Move each business domain into its own Google Cloud organization for isolation, synchronize IAM via Cloud Identity groups, and use Cloud Armor rules to control access to data endpoints.

Report Issue

Answer Description

Dataplex lets you create logical lakes that span projects and regions. By registering Cloud Storage buckets and BigQuery datasets as Dataplex assets inside domain-specific zones, you give each business unit control of its own data while the central team applies lake-level governance: unified metadata catalog, data quality rules, and consistent IAM or encryption policies that propagate to every underlying asset. Alternatives either lack cross-system policy enforcement (BigLake alone), rely on manual policy scripting (Data Catalog plus Cloud Functions), or add unnecessary organizational complexity (separate organizations and Cloud Armor). Therefore, using Dataplex lakes with zones and centrally managed governance is the optimal, low-overhead solution.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.