Crucial Exams

GCP Professional Data Engineer Practice Question

Your company is building a new data pipeline on Google Cloud that ingests HL7 messages from its on-premises hospital network over Dedicated Interconnect into Pub/Sub, processes them with Dataflow, and writes curated data to BigQuery. The compliance team mandates that no pipeline component be reachable from, or initiate traffic to, the public internet, and it wants guardrails that prevent accidental data exfiltration to other projects. You must propose a solution that requires the least ongoing operational work. Which networking approach best meets these requirements?

  • Expose Pub/Sub and BigQuery via Private Service Connect endpoints but allow Dataflow workers to retain external IPs, adding an egress firewall rule that blocks all destinations except Google APIs.

  • Place Dataflow workers in a subnet behind Cloud NAT while keeping external IPs enabled, rely on ingress-blocking firewall rules, and trust that traffic over Cloud Interconnect satisfies the no-internet requirement.

  • Use a Shared VPC with only private subnets, create Dataflow workers without external IPs, enable Private Google Access, and define a VPC Service Controls perimeter that includes Pub/Sub, Dataflow, Cloud Storage, BigQuery, and Cloud Composer.

  • Deploy the pipeline in the default VPC with public IPs and restrict access through Identity-Aware Proxy; protect BigQuery data with customer-managed encryption keys for compliance.

GCP Professional Data Engineer
Ingesting and processing the data
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot