Google Professional Data Engineer Practice Test 21
Question 200
After applying the change, the team re-examines this condition: A finance department publishes unreviewed experiment tables to the company-wide BI directory and consumers treat them as financial statements. Which result BEST verifies the improvement?
- A tenant user cannot query another organization's records through ordinary analytics tools.
- The subscriber queries an authorized shared dataset but cannot read unrelated publisher tables.
- A customer sees only allowed service metrics and cannot read base employee-level rows.
- Consumers can identify the approved financial dataset while draft tables remain clearly labeled.
Explanation
Correct Answer
D:Consumers can identify the approved financial dataset while draft tables remain clearly labeled. This measures the intended corrected behavior rather than only confirming a setting. Implemented action: Create a controlled publication process for certified datasets and report definitions. Data publication should distinguish certified, governed outputs from exploratory drafts.
Incorrect Answers
A:A tenant user cannot query another organization's records through ordinary analytics tools. This addresses a different situation: A SaaS analytics platform hosts multiple tenant records in one BigQuery table, and users may see only their organization's rows. The current scenario instead calls for the more directly applicable verification result: Consumers can identify the approved financial dataset while draft tables remain clearly labeled. The reason is that data publication should distinguish certified, governed outputs from exploratory drafts.
B:The subscriber queries an authorized shared dataset but cannot read unrelated publisher tables. This addresses a different situation: Two companies want to share selected curated BigQuery datasets without copying unrestricted source projects into each tenant. The current scenario instead calls for the more directly applicable verification result: Consumers can identify the approved financial dataset while draft tables remain clearly labeled. The reason is that data publication should distinguish certified, governed outputs from exploratory drafts.
C:A customer sees only allowed service metrics and cannot read base employee-level rows. This addresses a different situation: A service provider exposes aggregate service quality metrics to customers but must not reveal individual employee work records. The current scenario instead calls for the more directly applicable verification result: Consumers can identify the approved financial dataset while draft tables remain clearly labeled. The reason is that data publication should distinguish certified, governed outputs from exploratory drafts.
Question 201
Before modifying the data platform, the team observes: A company lands vendor extracts directly in curated datasets, making it impossible to distinguish unvalidated source values from approved metrics. Which evidence should the engineer examine FIRST?
- Inspect forecast data volume, query patterns, ingestion rates, retention, and service limits.
- Review embedded project identifiers, regional service compatibility, and configuration files.
- Review source formats, SQL dialect assumptions, pipeline definitions, and operational dependencies.
- Inspect landing locations, transformation stages, table permissions, and traceability of corrections.
Explanation
Correct Answer
D:Inspect landing locations, transformation stages, table permissions, and traceability of corrections. This evidence directly tests the uncertain part of the described system. Raw, validated, and curated layers clarify ownership, quality, and reproducibility. A controlled response is: Define governed staging and curated data layers with controlled promotion checks.
Incorrect Answers
A:Inspect forecast data volume, query patterns, ingestion rates, retention, and service limits. This addresses a different situation: A pilot warehouse handles thousands of daily events but must support hundreds of millions without rewriting every consuming dashboard. The current scenario instead calls for the more directly applicable investigation: Inspect landing locations, transformation stages, table permissions, and traceability of corrections. The reason is that raw, validated, and curated layers clarify ownership, quality, and reproducibility.
B:Review embedded project identifiers, regional service compatibility, and configuration files. This addresses a different situation: A pipeline deployment hardcodes one project ID and dataset location into every query, blocking deployment into another approved region. The current scenario instead calls for the more directly applicable investigation: Inspect landing locations, transformation stages, table permissions, and traceability of corrections. The reason is that raw, validated, and curated layers clarify ownership, quality, and reproducibility.
C:Review source formats, SQL dialect assumptions, pipeline definitions, and operational dependencies. This addresses a different situation: A data platform expects future multi-cloud processing, but its transformation logic is buried in manual console operations with no versioned definitions. The current scenario instead calls for the more directly applicable investigation: Inspect landing locations, transformation stages, table permissions, and traceability of corrections. The reason is that raw, validated, and curated layers clarify ownership, quality, and reproducibility.
Question 202
The data engineering team must correct this issue: Analysts may inspect product transactions but only a small fraud group may see a sensitive risk score in the same table. Which controlled engineering action is MOST appropriate?
- Grant the narrow dataset and job-execution permissions required, avoiding project-wide administration.
- Apply approved column policy tags and corresponding fine-grained access controls.
- Select compliant regional resources and constrain replication, jobs, and exports to approved locations.
- Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions.
Explanation
Correct Answer
B:Apply approved column policy tags and corresponding fine-grained access controls. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: A standard analyst queries allowed columns but is denied the tagged risk-score column. Column-level access policies can restrict sensitive BigQuery fields independently of broad table query rights.
Incorrect Answers
A:Grant the narrow dataset and job-execution permissions required, avoiding project-wide administration. This addresses a different situation: An analytics contractor needs to query one approved sales dataset, but the administrator proposes granting project-wide BigQuery Admin privileges. The current scenario instead calls for the more directly applicable engineering action: Apply approved column policy tags and corresponding fine-grained access controls. The reason is that column-level access policies can restrict sensitive BigQuery fields independently of broad table query rights.
C:Select compliant regional resources and constrain replication, jobs, and exports to approved locations. This addresses a different situation: A European customer contract restricts processing and storage to approved locations, while engineers intend to replicate datasets to another continent. The current scenario instead calls for the more directly applicable engineering action: Apply approved column policy tags and corresponding fine-grained access controls. The reason is that column-level access policies can restrict sensitive BigQuery fields independently of broad table query rights.
D:Apply reviewed organization policies at the appropriate hierarchy scope and document approved exemptions. This addresses a different situation: Several developer projects can create external IP resources and unrestricted service-account keys even though the organization prohibits them. The current scenario instead calls for the more directly applicable engineering action: Apply approved column policy tags and corresponding fine-grained access controls. The reason is that column-level access policies can restrict sensitive BigQuery fields independently of broad table query rights.
Question 203
A Google Cloud architecture review finds: Researchers place thousands of raw objects in a data lake and cannot identify schemas, ownership, or classification. Which principle BEST explains the underlying data-engineering risk?
- A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage.
- Intermediate-data retention should follow business utility, lineage, and compliance policy.
- Data lake ingestion benefits from schema contracts, validation, and curated layers.
- Lake security should enforce data-domain access and classification boundaries.
Explanation
Correct Answer
A:A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Inventory object prefixes, formats, source owners, and data classification. A focused corrective action is: Register lake assets in Dataplex Catalog with curated metadata and governed discovery.
Incorrect Answers
B:Intermediate-data retention should follow business utility, lineage, and compliance policy. This addresses a different situation: A lake accumulates experimental intermediate outputs that cost more than final retained datasets and lacks automated expiration. The current scenario instead calls for the more directly applicable principle: A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage. The reason is that a useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage.
C:Data lake ingestion benefits from schema contracts, validation, and curated layers. This addresses a different situation: Multiple departments publish raw JSON to a shared lake with inconsistent field definitions that break downstream reusable tables. The current scenario instead calls for the more directly applicable principle: A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage. The reason is that a useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage.
D:Lake security should enforce data-domain access and classification boundaries. This addresses a different situation: A research lake contains both public scientific data and restricted patient samples under one bucket with unrestricted reader roles. The current scenario instead calls for the more directly applicable principle: A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage. The reason is that a useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage.
Question 204
A Google Cloud architecture review finds: A partner adds nested JSON attributes to events and downstream parsing jobs fail on unknown fields. Which principle BEST explains the underlying data-engineering risk?
- Job-scoped managed compute can reduce idle cost for intermittent batch workloads.
- Streaming schemas need compatibility rules and controlled unknown-field behavior.
- Transformation failures require observable error paths and defined quality thresholds.
- Pipeline execution guarantees do not automatically make non-idempotent external side effects exactly once.
Explanation
Correct Answer
B:Streaming schemas need compatibility rules and controlled unknown-field behavior. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Review schema versions, parser settings, failed-message samples, and consumer expectations. A focused corrective action is: Evolve the schema compatibly or route incompatible versions through a governed mapping.
Incorrect Answers
A:Job-scoped managed compute can reduce idle cost for intermittent batch workloads. This addresses a different situation: A once-weekly Spark transformation uses a permanently running Dataproc cluster that sits idle most of the week. The current scenario instead calls for the more directly applicable principle: Streaming schemas need compatibility rules and controlled unknown-field behavior. The reason is that streaming schemas need compatibility rules and controlled unknown-field behavior.
C:Transformation failures require observable error paths and defined quality thresholds. This addresses a different situation: A Dataflow JavaScript or Python user-defined transform catches every exception and returns an empty record, hiding thousands of failed rows. The current scenario instead calls for the more directly applicable principle: Streaming schemas need compatibility rules and controlled unknown-field behavior. The reason is that streaming schemas need compatibility rules and controlled unknown-field behavior.
D:Pipeline execution guarantees do not automatically make non-idempotent external side effects exactly once. This addresses a different situation: An engineer claims an exactly-once Dataflow pipeline makes arbitrary external API side effects impossible to duplicate. The current scenario instead calls for the more directly applicable principle: Streaming schemas need compatibility rules and controlled unknown-field behavior. The reason is that streaming schemas need compatibility rules and controlled unknown-field behavior.
Question 205
A Google Cloud architecture review finds: An Airflow DAG reruns after scheduler recovery and reissues the same external billing update twice. Which principle BEST explains the underlying data-engineering risk?
- Versioned compilation and scheduled production execution improve repeatability and change control.
- Repeatable orchestration requires idempotent tasks and known checkpoints.
- Backfill workflows need dependency awareness and capacity controls.
- Scheduled workloads need explicit business time zones and calendar semantics.
Explanation
Correct Answer
B:Repeatable orchestration requires idempotent tasks and known checkpoints. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Review task retries, execution dates, side effects, and idempotency keys. A focused corrective action is: Design tasks with stable run identifiers and safe retries or external deduplication.
Incorrect Answers
A:Versioned compilation and scheduled production execution improve repeatability and change control. This addresses a different situation: A production ELT workflow pulls arbitrary local workspace changes without approvals, creating nondeterministic table definitions. The current scenario instead calls for the more directly applicable principle: Repeatable orchestration requires idempotent tasks and known checkpoints. The reason is that repeatable orchestration requires idempotent tasks and known checkpoints.
C:Backfill workflows need dependency awareness and capacity controls. This addresses a different situation: A yearly backfill invokes all daily dependent tasks concurrently, while downstream aggregation assumes every day is already complete. The current scenario instead calls for the more directly applicable principle: Repeatable orchestration requires idempotent tasks and known checkpoints. The reason is that repeatable orchestration requires idempotent tasks and known checkpoints.
D:Scheduled workloads need explicit business time zones and calendar semantics. This addresses a different situation: A daily report must run at 08:00 business time, but the scheduler is configured in UTC and shifts unexpectedly after regional daylight changes. The current scenario instead calls for the more directly applicable principle: Repeatable orchestration requires idempotent tasks and known checkpoints. The reason is that repeatable orchestration requires idempotent tasks and known checkpoints.
Question 206
The data engineering team must correct this issue: A data team migrates an operational reporting platform without identifying owners of critical reports or their acceptance criteria. Which controlled engineering action is MOST appropriate?
- Create a phased migration plan with report parity checks, accountable owners, and rollback criteria.
- Use a supported Database Migration Service path and a rehearsed switchover with reconciliation.
- Evaluate an approved Transfer Appliance or equivalent controlled initial bulk-transfer approach.
- Configure an eligible BigQuery Data Transfer Service connection with monitored refreshes.
Explanation
Correct Answer
A:Create a phased migration plan with report parity checks, accountable owners, and rollback criteria. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: Critical business reports reconcile in the destination and owners approve the planned cutover. Business migration success requires mapped consumers, dependencies, tests, and sign-off.
Incorrect Answers
B:Use a supported Database Migration Service path and a rehearsed switchover with reconciliation. This addresses a different situation: An enterprise migrates a high-write transactional database to Google Cloud and cannot afford a long source freeze during cutover. The current scenario instead calls for the more directly applicable engineering action: Create a phased migration plan with report parity checks, accountable owners, and rollback criteria. The reason is that business migration success requires mapped consumers, dependencies, tests, and sign-off.
C:Evaluate an approved Transfer Appliance or equivalent controlled initial bulk-transfer approach. This addresses a different situation: A research institute has hundreds of terabytes on isolated storage and cannot upload the first copy within its migration window. The current scenario instead calls for the more directly applicable engineering action: Create a phased migration plan with report parity checks, accountable owners, and rollback criteria. The reason is that business migration success requires mapped consumers, dependencies, tests, and sign-off.
D:Configure an eligible BigQuery Data Transfer Service connection with monitored refreshes. This addresses a different situation: An analytics team needs managed recurring imports from an approved external business SaaS source into BigQuery. The current scenario instead calls for the more directly applicable engineering action: Create a phased migration plan with report parity checks, accountable owners, and rollback criteria. The reason is that business migration success requires mapped consumers, dependencies, tests, and sign-off.
Question 207
Before modifying the data platform, the team observes: Developers test destructive transformations against the same production dataset used for regulatory reporting. Which evidence should the engineer examine FIRST?
- Inspect the contractor's tasks, project IAM bindings, dataset permissions, and audit logs.
- Review contractual geographies, BigQuery dataset locations, Cloud Storage bucket regions, and transfer flows.
- Check data classifications, policy tags, user groups, dataset roles, and sample SELECT permissions.
- Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity.
Explanation
Correct Answer
D:Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity. This evidence directly tests the uncertain part of the described system. Separate development and production boundaries limit the impact of exploratory and destructive data operations. A controlled response is: Create isolated nonproduction projects and datasets with masked test fixtures and deployment gates.
Incorrect Answers
A:Inspect the contractor's tasks, project IAM bindings, dataset permissions, and audit logs. This addresses a different situation: An analytics contractor needs to query one approved sales dataset, but the administrator proposes granting project-wide BigQuery Admin privileges. The current scenario instead calls for the more directly applicable investigation: Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity. The reason is that separate development and production boundaries limit the impact of exploratory and destructive data operations.
B:Review contractual geographies, BigQuery dataset locations, Cloud Storage bucket regions, and transfer flows. This addresses a different situation: A European customer contract restricts processing and storage to approved locations, while engineers intend to replicate datasets to another continent. The current scenario instead calls for the more directly applicable investigation: Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity. The reason is that separate development and production boundaries limit the impact of exploratory and destructive data operations.
C:Check data classifications, policy tags, user groups, dataset roles, and sample SELECT permissions. This addresses a different situation: Analysts may inspect product transactions but only a small fraud group may see a sensitive risk score in the same table. The current scenario instead calls for the more directly applicable investigation: Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity. The reason is that separate development and production boundaries limit the impact of exploratory and destructive data operations.
Question 208
A Google Cloud architecture review finds: A Dataflow job in a processing project reads raw data from an ingestion project but uses a broad human administrator credential. Which principle BEST explains the underlying data-engineering risk?
- Data residency requirements must govern dataset locations and every replication or processing path.
- Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control.
- Organization policy constraints complement IAM by preventing disallowed resource configurations.
- Audit logging and appropriate retention provide traceability of privileged data access and exports.
Explanation
Correct Answer
B:Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Inspect Dataflow worker identity, source bucket policies, destination dataset grants, and credential handling. A focused corrective action is: Use a dedicated worker service account with minimal permissions on approved source and destination resources.
Incorrect Answers
A:Data residency requirements must govern dataset locations and every replication or processing path. This addresses a different situation: A European customer contract restricts processing and storage to approved locations, while engineers intend to replicate datasets to another continent. The current scenario instead calls for the more directly applicable principle: Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control. The reason is that dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control.
C:Organization policy constraints complement IAM by preventing disallowed resource configurations. This addresses a different situation: Several developer projects can create external IP resources and unrestricted service-account keys even though the organization prohibits them. The current scenario instead calls for the more directly applicable principle: Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control. The reason is that dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control.
D:Audit logging and appropriate retention provide traceability of privileged data access and exports. This addresses a different situation: A compliance team cannot determine which identity exported a restricted BigQuery customer table last week. The current scenario instead calls for the more directly applicable principle: Dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control. The reason is that dedicated workload identities with scoped cross-project permissions improve least privilege and lifecycle control.
Question 209
The data engineering team must correct this issue: A logistics app needs millisecond lookups for enormous numbers of sparse sensor rows keyed by device and time, with no requirement for SQL joins. Which controlled engineering action is MOST appropriate?
- Configure supported PITR and conduct a rehearsal into an isolated recovery instance.
- Evaluate a Bigtable schema with well-distributed row keys and tested scans.
- Use supported Memorystore caching with bounded TTL and safe cache-miss fallbacks.
- Benchmark a compatible AlloyDB deployment with appropriate read pools and operational design.
Explanation
Correct Answer
B:Evaluate a Bigtable schema with well-distributed row keys and tested scans. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: Load testing meets lookup latency without hot tablets or unbounded range scans. Bigtable is appropriate for certain high-throughput low-latency key-oriented workloads when row-key design is sound.
Incorrect Answers
A:Configure supported PITR and conduct a rehearsal into an isolated recovery instance. This addresses a different situation: A PostgreSQL operational service needs to restore state from immediately before a faulty data migration, not merely from the last weekly export. The current scenario instead calls for the more directly applicable engineering action: Evaluate a Bigtable schema with well-distributed row keys and tested scans. The reason is that bigtable is appropriate for certain high-throughput low-latency key-oriented workloads when row-key design is sound.
C:Use supported Memorystore caching with bounded TTL and safe cache-miss fallbacks. This addresses a different situation: An ecommerce service repeatedly looks up the same short-lived inventory recommendations and overwhelms its primary datastore during traffic peaks. The current scenario instead calls for the more directly applicable engineering action: Evaluate a Bigtable schema with well-distributed row keys and tested scans. The reason is that bigtable is appropriate for certain high-throughput low-latency key-oriented workloads when row-key design is sound.
D:Benchmark a compatible AlloyDB deployment with appropriate read pools and operational design. This addresses a different situation: A PostgreSQL-compatible application has intensive operational transactions plus complex analytical queries and wants compatible managed performance options. The current scenario instead calls for the more directly applicable engineering action: Evaluate a Bigtable schema with well-distributed row keys and tested scans. The reason is that bigtable is appropriate for certain high-throughput low-latency key-oriented workloads when row-key design is sound.
Question 210
A Google Cloud architecture review finds: A reporting table is updated from multiple partners, and records arriving days late overwrite newer authoritative versions. Which principle BEST explains the underlying data-engineering risk?
- Data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone.
- Recovery objectives should drive resilient data placement, backups, and executable failover procedures.
- Transformation orchestration must enforce dependency order and freshness contracts.
- Generated SQL needs explicit validation, permission boundaries, and review before modifying governed data.
Explanation
Correct Answer
A:Data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Examine event times, source priority, change sequence, and BigQuery merge logic. A focused corrective action is: Implement version-aware merges with authoritative ordering and an auditable correction pathway.
Incorrect Answers
B:Recovery objectives should drive resilient data placement, backups, and executable failover procedures. This addresses a different situation: A regional processing failure stops daily regulatory datasets because all staging, computation, and recovery copies reside in one failure domain. The current scenario instead calls for the more directly applicable principle: Data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone. The reason is that data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone.
C:Transformation orchestration must enforce dependency order and freshness contracts. This addresses a different situation: A Dataform pipeline materializes monthly revenue before its upstream exchange-rate table refresh completes. The current scenario instead calls for the more directly applicable principle: Data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone. The reason is that data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone.
D:Generated SQL needs explicit validation, permission boundaries, and review before modifying governed data. This addresses a different situation: An analytics team uses LLM-generated BigQuery SQL and executes it immediately against production tables with write privileges. The current scenario instead calls for the more directly applicable principle: Data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone. The reason is that data fidelity depends on business-time semantics and conflict-resolution rules rather than arrival order alone.