Free Google Professional-Data-Engineer Exam Questions

Question 1

You have Cloud Functions written in Node.js that pull messages from Cloud Pub/Sub and send the data to BigQuery. You observe that the message processing rate on the Pub/Sub topic is orders of magnitude higher than anticipated, but there is no error logged in Stackdriver Log Viewer. What are the two most likely causes of this problem? Choose 2 answers.

A : blisher throughput quota is too small.

B : tal outstanding messages exceed the 10-MB maximum.

C : ror handling in the subscriber code is not handling run-time errors properly.

D : subscriber code cannot keep up with the messages.

E : subscriber code does not acknowledge the messages that it pulls.

Answer: C,D

Question 2

In order to securely transfer web traffic data from your computer's web browser to the Cloud Dataproc cluster you should use a(n) _____.

A : N connection

B : ecial browser

C : H tunnel

D : P connection

Answer: C

Question 3

You want to use Google Stackdriver Logging to monitor Google BigQuery usage. You need an instant notification to be sent to your monitoring tool when new data is appended to a certain table using an insert job, but you do not want to receive notifications for other tables. What should you do?

A : ke a call to the Stackdriver API to list all logs, and apply an advanced filter.

B : the Stackdriver logging admin interface, and enable a log sink export to BigQuery.

C : the Stackdriver logging admin interface, enable a log sink export to Google Cloud Pub/Sub, and subscribe to the topic from your monitoring tool.

D : ing the Stackdriver API, create a project sink with advanced log filter to export to Pub/Sub, and subscribe to the topic from your monitoring tool.

Answer: B

Question 4

You want to archive data in Cloud Storage. Because some data is very sensitive, you want to use the “Trust No One” (TNO) approach to encrypt your data to prevent the cloud provider staff from decrypting your data. What should you do?

A : gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key and unique additional authenticated data (AAD). Use gsutil cp to upload each encrypted file to the Cloud Storage bucket, and keep the AAD outside of Google Cloud.

B : gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key. Use gsutil cp to upload each encrypted file to the Cloud Storage bucket. Manually destroy the key previously used for encryption, and rotate the key once and rotate the key once.

C : ecify customer-supplied encryption key (CSEK) in the .boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in Cloud Memorystore as permanent storage of the secret.

D : ecify customer-supplied encryption key (CSEK) in the .boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in a different project that only the security team can access.

Answer: B

Question 5

You have a BigQuery dataset named "customers". All tables will be tagged by using a Data Catalog tag

template named "gdpr". The template contains one mandatory field, "has sensitive data~. with a boolean value.

All employees must be able to do a simple search and find tables in the dataset that have either true or false in

the "has sensitive data" field. However, only the Human Resources (HR) group should be able to see the data

inside the tables for which "hass-ensitive-data" is true. You give the all employees group the

bigquery.metadataViewer and bigquery.connectionUser roles on the dataset. You want to minimize

configuration overhead. What should you do next?

A : Create the "gdpr" tag template with private visibility. Assign the bigquery -dataViewer role to the HRgroup on the tables that contain sensitive data.

B : Create the ~gdpr" tag template with private visibility. Assign the datacatalog. tagTemplateViewer roleon this tag to the all employeesgroup, and assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.

C : Create the "gdpr" tag template with public visibility. Assign the bigquery. dataViewer role to the HRgroup on the tables that containsensitive data.

D : Create the "gdpr" tag template with public visibility. Assign the datacatalog. tagTemplateViewer role onthis tag to the all employees.group, and assign the bijquery.dataViewer role to the HR group on the tables that contain sensitive data.

Answer: D