🔥 40% Off Crucial Exams Memberships — Deal ends today!

1 hour, 53 minutes remaining!
Crucial Exams

GCP Professional Data Engineer Practice Question

An e-commerce company has a batch Dataflow pipeline that runs in the analytics-etl project and writes its results to an existing BigQuery dataset named prod_sales located in the separate prod-data project. To save time, an engineer previously granted the pipeline's controller service account the primitive Editor role on the prod-data project, but an internal audit now requires that you enforce the principle of least privilege. The pipeline must continue to create load jobs and append data to tables inside the prod_sales dataset. Which IAM redesign satisfies the requirement while removing unnecessary permissions?

  • Create a custom role containing only the bigquery.datasets.delete permission and assign it to the service account at the project level.

  • Grant the pipeline's service account the BigQuery User role on the prod-data project, relying on default table-level permissions for writes.

  • Grant the pipeline's service account the BigQuery Data Editor role on the prod_sales dataset and the BigQuery Job User role on the prod-data project.

  • Replace the Editor role with the BigQuery Admin role on the prod-data project so the pipeline retains full BigQuery privileges without broader project access.

GCP Professional Data Engineer
Designing data processing systems
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot