A data pipeline ingests PII data from a streaming source into Pub/Sub, processes it in Dataflow, and writes the results to BigQuery. The security team requires that data be encrypted at rest with customer-managed keys and that the keys be rotated every 30 days. Which configuration should the data engineer implement?

Use Cloud DLP to de-identify the data before it enters the pipeline, and store the de-identified data in BigQuery.

Create a Cloud KMS key ring and key, enable CMEK for Pub/Sub, Dataflow, and BigQuery, and set up a Cloud Scheduler job to rotate the key every 30 days.

Use Google-managed encryption for Pub/Sub, Dataflow, and BigQuery, and rely on the default key rotation.

Encrypt the data in the application before publishing to Pub/Sub, and use Google-managed keys for BigQuery.

Google CloudProfessional Data Engineer

Domain 2Objective 1

2.1 Planning the Data Pipelines PROFESSIONAL-DATA-ENGINEER Practice Questions (Page 1)

Part of the Ingesting and processing the data domain, which accounts for ~25% of the PROFESSIONAL-DATA-ENGINEER exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

6concepts

~25%of the exam

Questions 1–5

1foundation · easy
A pipeline produces a continuous stream of events that must be consumed by multiple downstream applications with low latency. Which type of data sink is most appropriate?
Select an answer first
2application · medium
A data pipeline ingests PII data from a streaming source into Pub/Sub, processes it in Dataflow, and writes the results to BigQuery. The security team requires that data be encrypted at rest with customer-managed keys and that the keys be rotated every 30 days. Which configuration should the data engineer implement?
Select an answer first
3foundation · easy
A pipeline must store large volumes of raw, unstructured data in its native format for future analysis. Which type of data sink is most appropriate?
Select an answer first
4foundation · easy
A pipeline reads raw clickstream logs and must remove records with missing user IDs, then combine the remaining records with user profile data. Which sequence of transformations is required?
Select an answer first
5foundation · easy
A pipeline transfers data over the internet from an on-premises system to Google Cloud. Which encryption mechanism should be used to protect the data during transfer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-DATA-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-DATA-ENGINEER” is a trademark of its owner, used for identification only.

2.1 Planning the Data Pipelines PROFESSIONAL-DATA-ENGINEER Practice Questions (Page 1)

Questions 1–5

A pipeline produces a continuous stream of events that must be consumed by multiple downstream applications with low latency. Which type of data sink is most appropriate?

A pipeline must store large volumes of raw, unstructured data in its native format for future analysis. Which type of data sink is most appropriate?

A pipeline reads raw clickstream logs and must remove records with missing user IDs, then combine the remaining records with user profile data. Which sequence of transformations is required?

A pipeline transfers data over the internet from an on-premises system to Google Cloud. Which encryption mechanism should be used to protect the data during transfer?

Keep studying — Ingesting and processing the data