Crucial Exams

GCP Professional Data Engineer Practice Question

Your company processes regulated healthcare data in a Dataflow batch pipeline that reads from Cloud Storage and writes to BigQuery. The security team mandates that no Dataflow worker VM may have an external IP address, yet the job must still reach Google APIs without manual proxy management. Which networking configuration best satisfies these requirements?

  • Start the Dataflow job with the no-public-IPs option and enable Cloud NAT or Private Google Access on the worker subnet so workers use only private addresses while accessing Google APIs.

  • Keep the default Dataflow network and place the project in a VPC Service Controls perimeter, accepting that each worker retains a public IP.

  • Migrate the pipeline to a private Dataproc cluster and expose the master node through TCP forwarding for API access.

  • Run the job in a shared VPC subnet that assigns external IPs by default, but block all 0.0.0.0/0 ingress with firewall rules.

GCP Professional Data Engineer
Ingesting and processing the data
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot