Topic 1 Question 215
You are administering a BigQuery dataset that uses a customer-managed encryption key (CMEK). You need to share the dataset with a partner organization that does not have access to your CMEK. What should you do?
Provide the partner organization a copy of your CMEKs to decrypt the data.
Export the tables to parquet files to a Cloud Storage bucket and grant the storageinsights.viewer role on the bucket to the partner organization.
Copy the tables you need to share to a dataset without CMEKs. Create an Analytics Hub listing for this dataset.
Create an authorized view that contains the CMEK to decrypt the data when accessed.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: C
Preserves Key Confidentiality:
Avoids sharing your CMEK with the partner, upholding key security and control.
👍 2e70ea9e2023/12/30 - 正解だと思う選択肢: C
- Create a copy of the necessary tables into a new dataset that doesn't use CMEK, ensuring the data is accessible without requiring the partner to have access to the encryption key.
- Analytics Hub can then be used to share this data securely and efficiently with the partner organization, maintaining control and governance over the shared data.
👍 2raaad2024/01/03
シャッフルモード