1.1 Designing for Security and Compliance PROFESSIONAL-DATA-ENGINEER Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   Your organization has a security policy that requires encryption keys to be rotated every 90 days. You have a Cloud KMS key used to encrypt data in BigQuery. What is the simplest way to meet this requirement?

   • ADelete the existing key and create a new one with the same name.
   • BDisable the old key and enable a new key that you import from your on-premises HSM.
   • CCreate a new key version every 90 days and set it as the primary version.
   • DChange the key's purpose to 'rotation' and update the key material.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a best practice for managing data in a development environment?

   • AGrant all developers full access to production data to speed up development.
   • BUse synthetic or masked data that resembles production data without containing real sensitive information.
   • CUse production data in development to ensure realistic testing.
   • DDisable encryption in development to improve performance.
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   What is the primary purpose of data masking?

   • ATo encrypt data so that it cannot be read without a key.
   • BTo delete sensitive data from a dataset permanently.
   • CTo replace sensitive data with realistic but fake data for testing or development.
   • DTo anonymize data by removing all identifying information.
   Reveal Solution Discussion Select an answer first