professional-cloud-data-engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
A financial SaaS enterprise is designing a multi-tenant data access architecture in BigQuery to serve both internal analytics teams and external client organizations. The data architecture must satisfy the following technical and compliance requirements:
Which architecture should the data engineering team implement to satisfy these requirements?
A dedicated dataset per tenant design segregates tenant data into discrete BigQuery datasets (or subset tables) written by an upstream orchestration or ETL/ELT service like Cloud Dataflow. This is combined with Dataplex policy tags and dynamic data masking to enforce granular, role-based column access control natively within BigQuery.
StudyCerts
StudyCertsroles/datacatalog.categoryFineGrainedReader) role.Using Dataflow to write dedicated per-tenant datasets eliminates the 2,500 resource ceiling and single-region constraint inherent to authorized views, while native dynamic data masking provides robust column-level security without maintaining duplicate, obfuscated views.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.