cert
cert-1
cert-2

Pass Google Professional Data Engineer Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
Professional Data Engineer Exam - Verified By Experts
Professional Data Engineer Premium Bundle
$29.98

Professional Data Engineer Premium Bundle

$79.99
$109.97
  • Premium File 349 Questions & Answers. Last update: Nov 02, 2026
  • Training Course 201 Video Lectures
  • Study Guide 543 Pages
 
$109.97
$79.99
accept 59 downloads in last 7 days
block-screenshots
Purchase Google Professional Data Engineer Exam Training Products Individually
Google Professional Data Engineer Premium File
Premium File 349 Q&A
$76.99$69.99
Google Professional Data Engineer Video Training Course
Training Course 201 Lectures
$21.99 $19.99
Google Professional Data Engineer PDF Study Guide
Study Guide 543 Pages
$21.99 $19.99
Google Professional Data Engineer Practice Test 2

Question 10

After applying the change, the team re-examines this condition: A research lake contains both public scientific data and restricted patient samples under one bucket with unrestricted reader roles. Which result BEST verifies the improvement?

  1. An incompatible JSON change is flagged and does not silently enter certified lake tables.
  2. The public researcher retrieves allowed files but cannot list or read restricted patient objects.
  3. An authorized researcher finds the correct lake dataset and understands its ownership and sensitivity.
  4. Unused scratch output expires while legal records and required lineage artifacts remain intact.

Explanation

Correct Answer

B:

The public researcher retrieves allowed files but cannot list or read restricted patient objects. This measures the intended corrected behavior rather than only confirming a setting. Implemented action: Create segregated governed storage or lake access policies with least-privilege permissions. Lake security should enforce data-domain access and classification boundaries.

Incorrect Answers

A:

An incompatible JSON change is flagged and does not silently enter certified lake tables. This addresses a different situation: Multiple departments publish raw JSON to a shared lake with inconsistent field definitions that break downstream reusable tables. The current scenario instead calls for the more directly applicable verification result: The public researcher retrieves allowed files but cannot list or read restricted patient objects. The reason is that lake security should enforce data-domain access and classification boundaries.

C:

An authorized researcher finds the correct lake dataset and understands its ownership and sensitivity. This addresses a different situation: Researchers place thousands of raw objects in a data lake and cannot identify schemas, ownership, or classification. The current scenario instead calls for the more directly applicable verification result: The public researcher retrieves allowed files but cannot list or read restricted patient objects. The reason is that lake security should enforce data-domain access and classification boundaries.

D:

Unused scratch output expires while legal records and required lineage artifacts remain intact. This addresses a different situation: A lake accumulates experimental intermediate outputs that cost more than final retained datasets and lacks automated expiration. The current scenario instead calls for the more directly applicable verification result: The public researcher retrieves allowed files but cannot list or read restricted patient objects. The reason is that lake security should enforce data-domain access and classification boundaries.

Question 11

Before modifying the data platform, the team observes: An embedded dashboard lets viewers export all underlying data even though contracts permit only monthly aggregates. Which evidence should the engineer examine FIRST?

  1. Audit embedded viewer roles, export permissions, data source privileges, and contracts.
  2. Review publisher datasets, subscription requirements, usage agreements, and IAM permissions.
  3. Review lineage, approval records, data quality checks, and access destinations.
  4. Inspect subscriber relationships, listing permissions, audit events, and data ownership.

Explanation

Correct Answer

A:

Audit embedded viewer roles, export permissions, data source privileges, and contracts. This evidence directly tests the uncertain part of the described system. Data sharing controls must cover export and connector capabilities as well as visible charts. A controlled response is: Restrict report export and underlying dataset grants consistent with approved aggregate-only access.

Incorrect Answers

B:

Review publisher datasets, subscription requirements, usage agreements, and IAM permissions. This addresses a different situation: Two companies want to share selected curated BigQuery datasets without copying unrestricted source projects into each tenant. The current scenario instead calls for the more directly applicable investigation: Audit embedded viewer roles, export permissions, data source privileges, and contracts. The reason is that data sharing controls must cover export and connector capabilities as well as visible charts.

C:

Review lineage, approval records, data quality checks, and access destinations. This addresses a different situation: A finance department publishes unreviewed experiment tables to the company-wide BI directory and consumers treat them as financial statements. The current scenario instead calls for the more directly applicable investigation: Audit embedded viewer roles, export permissions, data source privileges, and contracts. The reason is that data sharing controls must cover export and connector capabilities as well as visible charts.

D:

Inspect subscriber relationships, listing permissions, audit events, and data ownership. This addresses a different situation: A business data provider wants to revoke a partner's access to an outdated analytics feed without invalidating access for other subscribers. The current scenario instead calls for the more directly applicable investigation: Audit embedded viewer roles, export permissions, data source privileges, and contracts. The reason is that data sharing controls must cover export and connector capabilities as well as visible charts.

Question 12

A Google Cloud architecture review finds: An analytics contractor needs to query one approved sales dataset, but the administrator proposes granting project-wide BigQuery Admin privileges. Which principle BEST explains the underlying data-engineering risk?

  1. Dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure.
  2. Column-level access policies can restrict sensitive BigQuery fields independently of broad table query rights.
  3. Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control.
  4. Data residency requirements must govern dataset locations and every replication or processing path.

Explanation

Correct Answer

A:

Dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Inspect the contractor's tasks, project IAM bindings, dataset permissions, and audit logs. A focused corrective action is: Grant the narrow dataset and job-execution permissions required, avoiding project-wide administration.

Incorrect Answers

B:

Column-level access policies can restrict sensitive BigQuery fields independently of broad table query rights. This addresses a different situation: Analysts may inspect product transactions but only a small fraud group may see a sensitive risk score in the same table. The current scenario instead calls for the more directly applicable principle: Dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure. The reason is that dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure.

C:

Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control. This addresses a different situation: A Dataflow job in a processing project reads raw data from an ingestion project but uses a broad human administrator credential. The current scenario instead calls for the more directly applicable principle: Dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure. The reason is that dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure.

D:

Data residency requirements must govern dataset locations and every replication or processing path. This addresses a different situation: A European customer contract restricts processing and storage to approved locations, while engineers intend to replicate datasets to another continent. The current scenario instead calls for the more directly applicable principle: Dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure. The reason is that dataset-scoped roles limit access without giving users authority over unrelated data or infrastructure.

Question 13

A Google Cloud data engineer is addressing: Finance and logistics teams publish data independently, but a central team imposes one schema that ignores both domains' definitions. Which TWO complementary actions should the team take? Select TWO answers.

  1. Implement a governed lakehouse catalog and role model that avoids bypass through raw object access.
  2. Inspect domain contracts, catalog lineage, global policies, and consumer responsibilities.
  3. Review consumer SLAs, schema change history, alerting, and delivery timestamps.
  4. Define domain-owned data products with cross-domain contracts, catalog registration, and shared guardrails.
  5. Create an approved Dataplex Catalog classification approach and map existing assets into it.

Explanation

Correct Answers

B:

Inspect domain contracts, catalog lineage, global policies, and consumer responsibilities. This is the applicable diagnostic investigation. Its complementary step is: Define domain-owned data products with cross-domain contracts, catalog registration, and shared guardrails. Together they address: Federated data platform governance balances domain ownership with shared discovery and interoperability policies.

D:

Define domain-owned data products with cross-domain contracts, catalog registration, and shared guardrails. This is the applicable controlled engineering response. Its complementary step is: Inspect domain contracts, catalog lineage, global policies, and consumer responsibilities. Together they address: Federated data platform governance balances domain ownership with shared discovery and interoperability policies.

Incorrect Answers

A:

Implement a governed lakehouse catalog and role model that avoids bypass through raw object access. This could be useful for another system: Data teams use Cloud Storage for open formats and BigQuery for SQL, but each engine applies incompatible permissions to the same sensitive records. For this situation, the necessary paired decisions are to examine (Inspect domain contracts, catalog lineage, global policies, and consumer responsibilities.) and to implement (Define domain-owned data products with cross-domain contracts, catalog registration, and shared guardrails.).

C:

Review consumer SLAs, schema change history, alerting, and delivery timestamps. This could be useful for another system: An internal data product is advertised as reliable, but consumers receive schema changes and delayed data without notice. For this situation, the necessary paired decisions are to examine (Inspect domain contracts, catalog lineage, global policies, and consumer responsibilities.) and to implement (Define domain-owned data products with cross-domain contracts, catalog registration, and shared guardrails.).

E:

Create an approved Dataplex Catalog classification approach and map existing assets into it. This could be useful for another system: A company acquires another business and wants consistent discovery and access classification across existing BigQuery and Cloud Storage assets. For this situation, the necessary paired decisions are to examine (Inspect domain contracts, catalog lineage, global policies, and consumer responsibilities.) and to implement (Define domain-owned data products with cross-domain contracts, catalog registration, and shared guardrails.).

Question 14

The data engineering team must correct this issue: Several developer projects can create external IP resources and unrestricted service-account keys even though the organization prohibits them. Which controlled engineering action is MOST appropriate?

  1. Use a dedicated worker service account with minimal permissions on approved source and destination resources.
  2. De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset.
  3. Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions.
  4. Create isolated nonproduction projects and datasets with masked test fixtures and deployment gates.

Explanation

Correct Answer

C:

Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: A test project cannot create prohibited resources while approved deployment patterns still work. Organization policy constraints complement IAM by preventing disallowed resource configurations.

Incorrect Answers

A:

Use a dedicated worker service account with minimal permissions on approved source and destination resources. This addresses a different situation: A Dataflow job in a processing project reads raw data from an ingestion project but uses a broad human administrator credential. The current scenario instead calls for the more directly applicable engineering action: Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions. The reason is that organization policy constraints complement IAM by preventing disallowed resource configurations.

B:

De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset. This addresses a different situation: Customer support event feeds contain phone numbers and account identifiers, but most analysts require only behavioral aggregates. The current scenario instead calls for the more directly applicable engineering action: Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions. The reason is that organization policy constraints complement IAM by preventing disallowed resource configurations.

D:

Create isolated nonproduction projects and datasets with masked test fixtures and deployment gates. This addresses a different situation: Developers test destructive transformations against the same production dataset used for regulatory reporting. The current scenario instead calls for the more directly applicable engineering action: Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions. The reason is that organization policy constraints complement IAM by preventing disallowed resource configurations.

Question 15

Before modifying the data platform, the team observes: A production model receives categorical values in a format different from the BigQuery ML training transformations. Which evidence should the engineer examine FIRST?

  1. Review source freshness, chunk boundaries, embedding model, ACLs, and retrieval quality.
  2. Inspect model creation SQL, source table snapshots, parameters, and evaluation history.
  3. Inspect document types, OCR quality, extracted text, language detection, and document access.
  4. Inspect preprocessing definitions, feature encodings, input schemas, and deployed inference logic.

Explanation

Correct Answer

D:

Inspect preprocessing definitions, feature encodings, input schemas, and deployed inference logic. This evidence directly tests the uncertain part of the described system. Training-serving feature consistency is essential for reliable inference quality. A controlled response is: Version reusable transformations and validate feature parity between training and serving.

Incorrect Answers

A:

Review source freshness, chunk boundaries, embedding model, ACLs, and retrieval quality. This addresses a different situation: A customer-service assistant needs grounded retrieval from updated knowledge articles, but the current index mixes old and current documents without lineage. The current scenario instead calls for the more directly applicable investigation: Inspect preprocessing definitions, feature encodings, input schemas, and deployed inference logic. The reason is that training-serving feature consistency is essential for reliable inference quality.

B:

Inspect model creation SQL, source table snapshots, parameters, and evaluation history. This addresses a different situation: A data scientist overwrites a BigQuery ML model each week and has no record of which training window produced the current predictions. The current scenario instead calls for the more directly applicable investigation: Inspect preprocessing definitions, feature encodings, input schemas, and deployed inference logic. The reason is that training-serving feature consistency is essential for reliable inference quality.

C:

Inspect document types, OCR quality, extracted text, language detection, and document access. This addresses a different situation: A records team ingests scanned PDFs for semantic search but indexes raw unreadable binary bytes as if they were meaningful text. The current scenario instead calls for the more directly applicable investigation: Inspect preprocessing definitions, feature encodings, input schemas, and deployed inference logic. The reason is that training-serving feature consistency is essential for reliable inference quality.

Question 16

The data engineering team must correct this issue: A Dataflow group-by-key stage slows because almost all events share one constant grouping value. Which controlled engineering action is MOST appropriate?

  1. Adopt a supported Kafka-to-Google Cloud ingestion connector or bridge with measured delivery guarantees.
  2. Use a validated staging table and deterministic BigQuery MERGE logic with deduplicated keys.
  3. Redesign the aggregation key or introduce valid fan-out patterns where supported.
  4. Trigger a verified pipeline on object-finalize events with generation-aware deduplication.

Explanation

Correct Answer

C:

Redesign the aggregation key or introduce valid fan-out patterns where supported. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: A representative heavy-key workload scales without one worker dominating processing time. Skewed keys can serialize distributed work and degrade parallel pipeline throughput.

Incorrect Answers

A:

Adopt a supported Kafka-to-Google Cloud ingestion connector or bridge with measured delivery guarantees. This addresses a different situation: A platform has existing Kafka producers and needs to introduce cloud analytics without rewriting every producer immediately. The current scenario instead calls for the more directly applicable engineering action: Redesign the aggregation key or introduce valid fan-out patterns where supported. The reason is that skewed keys can serialize distributed work and degrade parallel pipeline throughput.

B:

Use a validated staging table and deterministic BigQuery MERGE logic with deduplicated keys. This addresses a different situation: A nightly BigQuery MERGE job occasionally reruns after an orchestrator timeout and inserts duplicate business keys. The current scenario instead calls for the more directly applicable engineering action: Redesign the aggregation key or introduce valid fan-out patterns where supported. The reason is that skewed keys can serialize distributed work and degrade parallel pipeline throughput.

D:

Trigger a verified pipeline on object-finalize events with generation-aware deduplication. This addresses a different situation: A pipeline should start only after a new approved object lands in a bucket, but currently polls every minute and processes partially copied files. The current scenario instead calls for the more directly applicable engineering action: Redesign the aggregation key or introduce valid fan-out patterns where supported. The reason is that skewed keys can serialize distributed work and degrade parallel pipeline throughput.

Question 17

The data engineering team must correct this issue: A warehouse stores years of events and most reports filter by event date and customer segment, but all queries scan the full table. Which controlled engineering action is MOST appropriate?

  1. Use a suitable Cloud SQL edition and HA configuration with controlled migrations.
  2. Apply reviewed Cloud Storage lifecycle policies with an approved cold-tier or deletion strategy.
  3. Partition by the relevant date field and cluster on useful high-selectivity columns where appropriate.
  4. Benchmark a compatible AlloyDB deployment with appropriate read pools and operational design.

Explanation

Correct Answer

C:

Partition by the relevant date field and cluster on useful high-selectivity columns where appropriate. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: A representative date-filtered query scans fewer bytes without changing results. Partitioning and clustering can reduce eligible BigQuery query scanning when aligned with predicates.

Incorrect Answers

A:

Use a suitable Cloud SQL edition and HA configuration with controlled migrations. This addresses a different situation: A small business runs a conventional PostgreSQL order service and needs managed backups and routine high availability without massive global horizontal write scale. The current scenario instead calls for the more directly applicable engineering action: Partition by the relevant date field and cluster on useful high-selectivity columns where appropriate. The reason is that partitioning and clustering can reduce eligible BigQuery query scanning when aligned with predicates.

B:

Apply reviewed Cloud Storage lifecycle policies with an approved cold-tier or deletion strategy. This addresses a different situation: A media company keeps infrequently accessed raw video assets in standard storage for years and has no retention or retrieval policy. The current scenario instead calls for the more directly applicable engineering action: Partition by the relevant date field and cluster on useful high-selectivity columns where appropriate. The reason is that partitioning and clustering can reduce eligible BigQuery query scanning when aligned with predicates.

D:

Benchmark a compatible AlloyDB deployment with appropriate read pools and operational design. This addresses a different situation: A PostgreSQL-compatible application has intensive operational transactions plus complex analytical queries and wants compatible managed performance options. The current scenario instead calls for the more directly applicable engineering action: Partition by the relevant date field and cluster on useful high-selectivity columns where appropriate. The reason is that partitioning and clustering can reduce eligible BigQuery query scanning when aligned with predicates.

Question 18

The data engineering team must correct this issue: A regulated finance team requires customer-managed keys for sensitive BigQuery tables and documented key revocation procedures. Which controlled engineering action is MOST appropriate?

  1. Apply approved column policy tags and corresponding fine-grained access controls.
  2. Create the approved regional KMS key and configure eligible BigQuery storage to use it with scoped service-agent access.
  3. Use a dedicated worker service account with minimal permissions on approved source and destination resources.
  4. De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset.

Explanation

Correct Answer

B:

Create the approved regional KMS key and configure eligible BigQuery storage to use it with scoped service-agent access. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: Authorized queries continue during planned rotations while a revoked key produces the expected access failure. Customer-managed encryption keys introduce additional key access and availability dependencies that must be governed.

Incorrect Answers

A:

Apply approved column policy tags and corresponding fine-grained access controls. This addresses a different situation: Analysts may inspect product transactions but only a small fraud group may see a sensitive risk score in the same table. The current scenario instead calls for the more directly applicable engineering action: Create the approved regional KMS key and configure eligible BigQuery storage to use it with scoped service-agent access. The reason is that customer-managed encryption keys introduce additional key access and availability dependencies that must be governed.

C:

Use a dedicated worker service account with minimal permissions on approved source and destination resources. This addresses a different situation: A Dataflow job in a processing project reads raw data from an ingestion project but uses a broad human administrator credential. The current scenario instead calls for the more directly applicable engineering action: Create the approved regional KMS key and configure eligible BigQuery storage to use it with scoped service-agent access. The reason is that customer-managed encryption keys introduce additional key access and availability dependencies that must be governed.

D:

De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset. This addresses a different situation: Customer support event feeds contain phone numbers and account identifiers, but most analysts require only behavioral aggregates. The current scenario instead calls for the more directly applicable engineering action: Create the approved regional KMS key and configure eligible BigQuery storage to use it with scoped service-agent access. The reason is that customer-managed encryption keys introduce additional key access and availability dependencies that must be governed.

Question 19

A Google Cloud architecture review finds: A production model receives categorical values in a format different from the BigQuery ML training transformations. Which principle BEST explains the underlying data-engineering risk?

  1. Imbalanced classification requires precision, recall, and business-cost analysis beyond accuracy.
  2. RAG retrieval requires appropriately chunked, versioned, permission-filtered document embeddings.
  3. Training-serving feature consistency is essential for reliable inference quality.
  4. Predictive features must be available at the intended prediction time to avoid target leakage.

Explanation

Correct Answer

C:

Training-serving feature consistency is essential for reliable inference quality. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Inspect preprocessing definitions, feature encodings, input schemas, and deployed inference logic. A focused corrective action is: Version reusable transformations and validate feature parity between training and serving.

Incorrect Answers

A:

Imbalanced classification requires precision, recall, and business-cost analysis beyond accuracy. This addresses a different situation: A fraud model reports 99 percent accuracy on data where only one in a thousand transactions is fraudulent. The current scenario instead calls for the more directly applicable principle: Training-serving feature consistency is essential for reliable inference quality. The reason is that training-serving feature consistency is essential for reliable inference quality.

B:

RAG retrieval requires appropriately chunked, versioned, permission-filtered document embeddings. This addresses a different situation: A customer-service assistant needs grounded retrieval from updated knowledge articles, but the current index mixes old and current documents without lineage. The current scenario instead calls for the more directly applicable principle: Training-serving feature consistency is essential for reliable inference quality. The reason is that training-serving feature consistency is essential for reliable inference quality.

D:

Predictive features must be available at the intended prediction time to avoid target leakage. This addresses a different situation: A churn model trains on a cancellation timestamp that becomes known only after the customer leaves, producing unrealistic validation accuracy. The current scenario instead calls for the more directly applicable principle: Training-serving feature consistency is essential for reliable inference quality. The reason is that training-serving feature consistency is essential for reliable inference quality.

Question 20

A design review evaluates this situation: A production relational data source resides on a single-zone Cloud SQL instance and a zone outage stops all ingestion. Which shortcut should the team MOST specifically avoid?

  1. Overwrite the corrupted partition with arbitrary zeros and call the data recovered.
  2. Assume BigQuery can query data in an unavailable location merely because global access is enabled.
  3. Treat an asynchronous read-only replica as a guaranteed writable transactional primary.
  4. Label a single-zone database highly available because it has automated daily backups.

Explanation

Correct Answer

D:

Label a single-zone database highly available because it has automated daily backups. This is the unsafe shortcut directly relevant to the stated system. A better approach is: Configure supported regional high availability and test application reconnection. Why: High availability plans must address actual zonal failure domains and tested recovery behavior.

Incorrect Answers

A:

Overwrite the corrupted partition with arbitrary zeros and call the data recovered. This addresses a different situation: An upstream vendor accidentally publishes a corrupted schema version and downstream totals become wrong before anyone notices. The current scenario instead calls for the more directly applicable unsafe shortcut: Label a single-zone database highly available because it has automated daily backups. The reason is that high availability plans must address actual zonal failure domains and tested recovery behavior.

B:

Assume BigQuery can query data in an unavailable location merely because global access is enabled. This addresses a different situation: A finance warehouse needs recoverable reporting after regional disruption but keeps its only critical dataset in one region. The current scenario instead calls for the more directly applicable unsafe shortcut: Label a single-zone database highly available because it has automated daily backups. The reason is that high availability plans must address actual zonal failure domains and tested recovery behavior.

C:

Treat an asynchronous read-only replica as a guaranteed writable transactional primary. This addresses a different situation: An application routes financial writes to a stale read replica after primary failure, returning success before records are durably committed. The current scenario instead calls for the more directly applicable unsafe shortcut: Label a single-zone database highly available because it has automated daily backups. The reason is that high availability plans must address actual zonal failure domains and tested recovery behavior.

Professional Data Engineer on Google Cloud Platform (Professional Data Engineer) Practice Tests