PDE Designing Data Processing Systems Practice Question
A data pipeline processes sensitive customer data. You need to ensure that only authorised users can query the data in BigQuery, and that the data is encrypted at rest and in transit. Which THREE steps should you take? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create authorised views in BigQuery to restrict access to sensitive columns
Encryption at rest is enabled by default with CMEK or CSEK. In-transit encryption is default for BigQuery. Authorised views provide fine-grained access control. IAM roles control dataset access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a Cloud VPN to encrypt data in transit between on-premises and Google Cloud
Why it's wrong here
Data in transit to BigQuery is already encrypted via HTTPS; VPN is not needed.
- ✗
Grant the bigquery.dataViewer role at the dataset level to all users
Why it's wrong here
That would grant access to all data in the dataset, not restricted.
- ✓
Create authorised views in BigQuery to restrict access to sensitive columns
Why this is correct
Authorised views allow fine-grained access control at row/column level.
- ✓
Enable default encryption with Customer-Managed Encryption Keys (CMEK) for BigQuery
Why this is correct
CMEK provides control over encryption keys for data at rest.
- ✓
Use IAM conditions to restrict access based on the requester's IP address
Why this is correct
IAM conditions can enforce access from specific IP ranges, adding security.
Go deeper
Related to this question
About these practice questions
One of 890 original PDE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PDE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PDE exam.