49 questions · Data Management · All types, answers revealed
Which TWO of the following are true regarding Dataplex security? (Choose two)
Granular IAM is supported.
Why this answer
Dataplex uses IAM for access and integrates with GCP security features.
You need to control access to specific columns in a BigQuery table using Dataplex-integrated policy tags. What must you create before you can apply a policy tag to a column?
You must define the taxonomy and the specific tags within it first.
Why this answer
A Policy Tag Taxonomy must be created in the Data Catalog / Dataplex taxonomy management before tags can be applied to columns.
You need to track lineage for a BigQuery table populated by a Dataflow pipeline. How does Dataplex help?
Lineage is automatically integrated for BigQuery and Dataflow.
Why this answer
Dataplex and Data Catalog integrate with BigQuery and Dataflow to capture lineage automatically when pipelines are correctly instrumented.
You want to enforce that all data in a specific Dataplex Zone must be encrypted with a Customer-Managed Encryption Key (CMEK). How do you enforce this?
Dataplex allows specifying CMEK keys during resource creation to enforce encryption.
Why this answer
When creating a Dataplex Lake or Zone, you can configure CMEK settings that apply to the underlying resources.
You are migrating data into a Dataplex Lake. You need to ensure that the data is partitioned by date to improve query performance. Where do you define this partitioning?
Assets represent the physical data; partitioning is defined here.
Why this answer
In Dataplex, partitioning is defined at the asset level when linking the BigQuery table or Cloud Storage files.
You need to restrict data access to specific geographic regions for compliance. Which Dataplex feature supports this?
You define the region during the creation of Lakes and Zones.
Why this answer
Dataplex allows you to restrict the location of data assets when creating a lake or zone.
You need to share a BigQuery dataset across multiple organizations. What is the recommended approach using Dataplex?
Dataplex provides the logical layer to bridge these assets.
Why this answer
Dataplex allows you to link cross-project and cross-org assets into a single lake, provided the appropriate IAM permissions are set.
You are troubleshooting lineage issues. Which THREE of the following factors could prevent lineage from being captured? (Choose three)
Required permission for writing lineage.
Why this answer
Lineage requires specific services, proper permissions, and correct instrumentation.
Which role is required to manage Dataplex assets within a Zone?
This role allows full management of lakes, zones, and assets.
Why this answer
The Dataplex Data Steward or Dataplex Admin role is required to manage assets, but specifically 'roles/dataplex.admin' or 'roles/dataplex.dataSteward' are used.
You want to perform data quality checks on a BigQuery table that is updated daily. How should you schedule the Dataplex task?
Tasks support scheduling for automation.
Why this answer
Dataplex tasks can be triggered on a schedule using cron syntax, allowing for daily alignment with data updates.
Which of the following is NOT a benefit of using Dataplex?
Dataplex does not provide OLTP capabilities; that is for Cloud Spanner/SQL.
Why this answer
Dataplex is for data governance and management, not for high-frequency low-latency transaction processing (OLTP).
Which TWO of the following tools allow you to interact with Dataplex? (Choose two)
Used for scripting and automation.
Why this answer
Users interact with Dataplex via the Cloud Console and the Google Cloud CLI (gcloud).
Which THREE of the following are common administrative tasks when managing a Dataplex Lake? (Choose three)
Managing the contents of the lake.
Why this answer
Admins handle access, assets, and task scheduling.
A team requires access to a specific Dataplex Zone. You want to grant them the ability to view metadata and query the data without granting them full owner permissions. Which role should you assign at the Lake level?
This role is designed to allow read access to metadata and underlying data.
Why this answer
The Dataplex Data Viewer role allows viewing metadata and querying data within the lake assets.
You need to ensure data compliance for PII. Which THREE of the following tools or features should you use in combination with Dataplex? (Choose three)
Audit logs ensure accountability.
Why this answer
DLP API, Policy Tags, and Audit Logs are standard for compliance.
When setting up a new Dataplex Lake, which TWO of the following configurations are required? (Choose two)
Names must be unique within the project.
Why this answer
A name and a region are required for every Lake creation.
You have a Dataplex Lake containing data from two different regions. How does this affect data access?
Regional access rules still apply to the physical data.
Why this answer
You must ensure that users have the necessary IAM permissions to access the data in both regions; the lake acts as a logical container but does not override regional access restrictions.
You need to ensure that a Dataplex user cannot view the contents of files in a GCS bucket registered as an asset. What is the minimal configuration?
IAM roles on the underlying storage resource govern data access.
Why this answer
You must remove the Storage Object Viewer role from the user for that specific bucket, even if they have Dataplex viewer roles.
You have a Data Catalog taxonomy that you want to share across multiple projects. How do you achieve this?
Taxonomies can be created in a central project and referenced by others.
Why this answer
You create the taxonomy in a central host project and grant permissions to other projects to use it.
When setting up a Dataplex Lake, you chose the 'Multi-region' location type. What is the implication of this choice?
Multi-region provides high availability and geo-redundancy.
Why this answer
Multi-region deployment increases availability and ensures data is replicated across multiple regions within the same geography.
What is the role of the 'Dataplex Data Steward'?
Data stewards handle the 'data' aspects of the platform.
Why this answer
The Data Steward is responsible for defining metadata, managing quality rules, and ensuring data policies are met.
Which console menu would you navigate to in order to access Dataplex?
Dataplex is grouped under Analytics services.
Why this answer
Dataplex is found under the 'Analytics' section in the Google Cloud console.
You have multiple departments using the same Dataplex Lake. You need to ensure that each department can only see data belonging to their own projects. What should you configure?
Zones allow for scoping data and security boundaries within a single lake.
Why this answer
Dataplex Zones allow for logical separation within a Lake, where permissions can be scoped to the zone level.
You need to move an asset from one Dataplex Zone to another. What is the correct procedure?
Assets are zone-bound; deletion and recreation is the required path.
Why this answer
Assets are tied to a specific zone. To move an asset, you must remove it from the source zone and add it to the destination zone.
What does 'Data Lineage' show you in Dataplex?
Lineage captures the 'where did this come from' information.
Why this answer
Data lineage tracks the origin, movement, and transformations of data as it moves through the pipeline.
You need to migrate legacy data to a Dataplex Lake. Which THREE of the following should you consider for a successful migration? (Choose three)
Plan your organization structure.
Why this answer
Migration requires planning for IAM, discovery, and testing.
You are configuring a Dataplex asset that points to a GCS bucket. You want to ensure that only files in a specific folder are included in the asset. How do you specify this?
Dataplex assets support prefix filters for GCS buckets.
Why this answer
When adding a GCS bucket as an asset, you can provide a filter or prefix to limit the scope to a specific path.
You have an automated pipeline that deletes files in a GCS bucket every hour. Dataplex shows the asset as 'Out of sync'. Why?
Metadata becomes stale if discovery hasn't refreshed the state.
Why this answer
Dataplex discovery scans periodically; if the physical data changes without the discovery job having run, the metadata might show as out of sync.
You need to audit who accessed sensitive data in a Dataplex Lake. Which service should you monitor to see access logs for these data assets?
Audit logs capture all API requests and access to Google Cloud resources.
Why this answer
Cloud Audit Logs records all access to data assets; Dataplex provides a unified view, but the logs reside in Cloud Audit Logs.
Which Dataplex component allows you to query data across different storage systems using a single SQL interface?
BigQuery acts as the compute engine for querying data assets in the lake.
Why this answer
The Dataplex Lake provides a unified view, and BigQuery Omni or federated queries allow querying across different storage systems.
You are configuring a Dataplex Data Quality task. You want to validate that a 'user_id' column has no NULL values. Where do you define this rule?
Dataplex expects a YAML file defining the quality rules to be passed to the task.
Why this answer
Data quality rules are defined in a YAML configuration file that Dataplex uses to run the quality check task.
Which TWO of the following are valid locations for a Dataplex Lake? (Choose two)
A valid multi-regional location.
Why this answer
Dataplex supports regional and multi-regional deployments.
Which service allows you to view the schema and metadata of a BigQuery table that has been registered in Dataplex?
Data Catalog is the tool used for viewing schema and metadata.
Why this answer
The Data Catalog interface within Dataplex provides a unified view of metadata, including schemas.
What is the purpose of a 'Data Zone' in Dataplex?
Zones serve as the logical boundary for policies and data management.
Why this answer
Zones are used to group data assets within a lake for common governance, security, and lifecycle policies.
You have sensitive data in Cloud Storage that needs to be deleted after 30 days to comply with regulatory requirements. What is the most efficient way to manage this?
Lifecycle rules are the native and most efficient way to handle object expiration.
Why this answer
Object lifecycle management rules in Cloud Storage are the standard way to automate data deletion based on age.
Which service should you use to search for and discover datasets across your entire Google Cloud organization?
Data Catalog allows centralized search and metadata discovery.
Why this answer
Data Catalog is the primary discovery tool for finding and understanding data assets in Google Cloud.
What happens if you delete a Dataplex Lake?
The lake is just a logical view; the storage remains intact.
Why this answer
Deleting a Lake removes the logical grouping but does not delete the underlying data assets (like BigQuery datasets or GCS buckets).
Which TWO of the following statements about Dataplex discovery are true? (Choose two)
It automatically detects schemas.
Why this answer
Discovery is automatic for registered assets and generates metadata including schema.
You have noticed that your data quality tasks are failing. Which THREE of the following are potential causes for failure? (Choose three)
Invalid YAML structure will cause the task to fail.
Why this answer
Common failures include permission issues, invalid rule configurations, or missing execution environments.
You need to ensure that PII (Personally Identifiable Information) in BigQuery is automatically detected and tagged across your organization. Which Dataplex feature should you enable on your Lake?
Data discovery scans the underlying storage to detect and label data.
Why this answer
Dataplex discovery scans data assets and can automatically apply labels and tags based on system-defined taxonomies.
What is the primary function of the 'Dataplex Discovery' process?
Discovery crawls the data to generate metadata and profile information.
Why this answer
Discovery automatically scans and catalogs data assets in your storage to make them discoverable.
You have data scattered across multiple projects and need to provide a unified data governance view. What is the recommended hierarchy?
Dataplex Lakes can aggregate assets across projects.
Why this answer
You create one Lake, and within that Lake, you add assets from different projects (within the same organization).
Which TWO of the following are true about the relationship between Data Catalog and Dataplex? (Choose two)
Data Catalog is the underlying metadata service.
Why this answer
Dataplex integrates Data Catalog capabilities; they are tightly coupled.
You are using Dataplex to manage data across multiple projects. You need to organize your BigQuery datasets and Cloud Storage buckets into a single logical entity for governance. Which Dataplex resource should you create?
A Lake is the top-level container for organizing data assets.
Why this answer
A Lake in Dataplex is a logical grouping of data assets that provides a boundary for governance and security.
You are implementing a security strategy for your data lake. Which THREE of the following are supported ways to control access to data within a Dataplex Lake? (Choose three)
Dataplex roles control access to the governance layer.
Why this answer
Access is controlled via IAM at the resource level, policy tags for fine-grained control, and Dataplex roles for metadata access.
A team is migrating to Dataplex. Which TWO of the following are prerequisites for adding a BigQuery dataset as an asset to a Lake? (Choose two)
You must have read access to link the dataset.
Why this answer
The user needs proper IAM permissions on the project and the dataset to register it as an asset.
You need to organize your data governance strategy. Which TWO of the following are valid ways to use Dataplex Zones to improve your data organization? (Choose two)
Zones act as security boundaries.
Why this answer
Zones are used to group assets by purpose (e.g., raw vs curated) and to enforce security policies.
A user complains they cannot see a Dataplex Lake in the console. You verify they have the 'Viewer' role on the project. What is missing?
Specific product-level viewer roles are required for resource visibility.
Why this answer
The user needs a specific Dataplex role (like Dataplex Viewer) to see the Dataplex resources in the UI.
Which TWO of the following are true about Dataplex assets? (Choose two)
Assets share the zone's region.
Why this answer
Assets point to existing storage and are managed within zones.
Ready to test yourself?
Try a timed practice session using only Data Management questions.