GCP Professional Data Engineer Practice Question

Under Google Cloud's shared responsibility model, Google is responsible for the security of the cloud-this includes the physical facilities, global network backbone, and patching of the underlying hardware and managed service infrastructure. Google also automatically encrypts BigQuery data at rest with Google-managed keys, so customers do not have to implement or maintain that control themselves. In contrast, customers are responsible for security in the cloud, which covers how they configure and control access to their own resources. Defining and maintaining Identity and Access Management (IAM) policies that decide who can read or modify BigQuery datasets is therefore the customer's obligation. Failing to do so would leave data exposed even though Google continues to secure the underlying platform.