Your company’s users access data in a BigQuery table. You want to ensure they can only access the data during working hours.
What should you do?
A.
Assign a BigQuery Data Viewer role along with an IAM condition that limits the access to specified working hours.
B.
Run a gsutil script that assigns a BigQuery Data Viewer role, and remove it only during the specified working hours.
C.
Assign a BigQuery Data Viewer role to a service account that adds and removes the users daily during the specified working hours.
D.
Configure Cloud Scheduler so that it triggers a Cloud Functions instance that modifies the organizational policy constraint for BigQuery during the specified working hours.
I have just passed my exam, but only 10 questions were from here... I really like this community based exam preparation, but this time i was surprised how invalid the dump is.
-Cloud Scheduler: Set up a Cloud Scheduler job that triggers a Cloud Function at specific times corresponding to your desired working hours.
-Cloud Function: Create a Cloud Function that modifies the BigQuery organizational policy constraint. During working hours, the function allows access. Outside working hours, it restricts access.
The correct answer is A. Assign a BigQuery Data Viewer role along with an IAM condition that limits the access to specified working hours.
IAM conditions in Google Cloud can be used to fine-tune access control according to attributes like time, date, and IP address. In this case, you can create an IAM condition that allows access only during working hours. This condition can be attached to the BigQuery Data Viewer role, ensuring that users can only access the data in the BigQuery table during the specified times.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Sundar_Pichai
3 months agodat987
3 months agolaxman94
3 months agoAkso
3 months, 4 weeks agoBettoxicity
7 months, 3 weeks agoglb2
8 months, 1 week agoNaikMN
11 months, 2 weeks agoMisterHairy
1 year ago