🔥 40% Off Crucial Exams Memberships — Deal ends today!

45 minutes, 2 seconds remaining!
Crucial Exams

GCP Professional Data Engineer Practice Question

Your company runs a group of Compute Engine instances that execute nightly analytics jobs containing protected health information (PHI). The jobs must read reference files from an encrypted Cloud Storage bucket and write results to a BigQuery dataset, both located in the production project. Compliance forbids embedding any long-lived user credentials in the VM images, and the security team requires least-privilege access with minimal operational effort for credential rotation. Which design best satisfies these constraints?

  • Store a Cloud Storage HMAC key in Secret Manager; have the application fetch the key at startup to sign requests to the bucket and to authenticate to BigQuery with signed URLs.

  • Grant the default Compute Engine service account the Project Editor role and let the application use the default credentials automatically provided by the metadata server.

  • Create a dedicated service account (for example, sa-analytics-vm). Grant it Storage Object Viewer on the specific bucket and BigQuery Data Editor on the target dataset, attach it as the runtime service account for the instances, and do not generate any user-managed keys.

  • Generate individual service-account keys for each engineer, embed the JSON key files in the VM startup script, and grant BigQuery Admin and Storage Admin roles at the project level. Rotate the keys quarterly.

GCP Professional Data Engineer
Designing data processing systems
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot