A data engineering team is building a pipeline that ingests sensitive customer data from an on-premises database into BigQuery. The data is transmitted over the public internet because the company does not have a VPN or interconnect. The team must ensure the data is protected in transit and at rest. They also need to control access to the encryption keys. Which set of configurations should they implement?

Use a VPN tunnel for the connection, and store data in BigQuery with Google-managed keys only.

Use TLS for the connection from the source to Google Cloud, rely on Google-managed encryption for BigQuery data at rest, and use Cloud KMS with customer-managed keys for additional control.

Rely on the public internet being encrypted by default and store data in BigQuery without any additional encryption settings.

Use a custom encryption algorithm in the application before sending data, and disable BigQuery's default encryption to avoid double encryption.

Google CloudProfessional Data Engineer

Domain 2Objective 1

2.1 Planning the Data Pipelines PROFESSIONAL-DATA-ENGINEER Practice Questions (Page 4)

Part of the Ingesting and processing the data domain, which accounts for ~25% of the PROFESSIONAL-DATA-ENGINEER exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

6concepts

~25%of the exam

Questions 16–19

16foundation · easy
A pipeline step occasionally fails due to transient network errors. Which orchestration feature should be configured to automatically attempt the step again?
Select an answer first
17foundation · easy
A pipeline stores sensitive data in Cloud Storage. Which encryption mechanism protects the data while it is stored?
Select an answer first
18foundation · easy
A data engineer needs to connect an on-premises network to a Google Cloud VPC to transfer data securely. Which networking feature is designed for this purpose?
Select an answer first
19application · medium
A data engineering team is building a pipeline that ingests sensitive customer data from an on-premises database into BigQuery. The data is transmitted over the public internet because the company does not have a VPN or interconnect. The team must ensure the data is protected in transit and at rest. They also need to control access to the encryption keys. Which set of configurations should they implement?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PROFESSIONAL-DATA-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-DATA-ENGINEER” is a trademark of its owner, used for identification only.

2.1 Planning the Data Pipelines PROFESSIONAL-DATA-ENGINEER Practice Questions (Page 4)

Questions 16–19

A pipeline step occasionally fails due to transient network errors. Which orchestration feature should be configured to automatically attempt the step again?

A pipeline stores sensitive data in Cloud Storage. Which encryption mechanism protects the data while it is stored?

A data engineer needs to connect an on-premises network to a Google Cloud VPC to transfer data securely. Which networking feature is designed for this purpose?

Keep studying — Ingesting and processing the data