Answer-first summary for fast verification
Answer: Create the "gdpr" tag template with public visibility. Assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.
The correct answer is C. By creating the 'gdpr' tag template with public visibility, you ensure that all employees can search and find tables based on the 'has_sensitive_data' field without additional permissions. Assigning the bigquery.dataViewer role to the HR group on tables with sensitive data ensures that only they can view the actual data in these tables. This approach minimizes configuration overhead while meeting the requirements.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
You are managing a BigQuery dataset named "customers" which will use a Data Catalog tag template named "gdpr" to organize its tables. The gdpr tag template includes a mandatory field called "has_sensitive_data" with a boolean value (true/false). The requirement is that all employees must be able to perform a simple search to locate tables based on the "has_sensitive_data" field. Additionally, only the Human Resources (HR) group should have the ability to view the data within the tables where "has_sensitive_data" is true. The all employees group has already been granted the bigquery.metadataViewer and bigquery.connectionUser roles for the dataset. Your objective is to achieve this with minimal configuration overhead. What should you do next?
A
Create the "gdpr" tag template with private visibility. Assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.
B
Create the "gdpr" tag template with private visibility. Assign the datacatalog.tagTemplateViewer role on this tag to the all employees group, and assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.
C
Create the "gdpr" tag template with public visibility. Assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.
D
Create the "gdpr" tag template with public visibility. Assign the datacatalog.tagTemplateViewer role on this tag to the all employees group, and assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.