Topic 1 Question 268
Your organization has sensitive data stored in BigQuery and Cloud Storage. You need to design a solution that provides granular and flexible control authorization to read data. What should you do?
Deidentify sensitive fields within the dataset by using data leakage protection within the Sensitive Data Protection services.
Use Cloud External Key Manager (Cloud EKM) to encrypt the data in BigQuery and Cloud Storage.
Grant identity and access management (IAM) roles and permissions to principals.
Enable server-side encryption on the data in BigQuery and Cloud Storage.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: C
I think it's C.
👍 1yokoyan2024/09/05 - 正解だと思う選択肢: C
Why Option C: Granular Control: IAM roles and permissions allow you to specify exactly who can access which resources, down to the level of individual datasets or tables. Flexibility: You can create custom roles and assign them to specific users, groups, or service accounts, tailoring access to your organization's needs. Security: By using IAM, you can enforce the principle of least privilege, ensuring that users have only the permissions they need. IAM roles and permissions provide the most comprehensive solution for managing access to sensitive data in BigQuery and Cloud Storage.
👍 1Pime132024/12/09
シャッフルモード