Google Professional Data Engineer Practice Test 49
Question 480
Before modifying the data platform, the team observes: Two companies want to share selected curated BigQuery datasets without copying unrestricted source projects into each tenant. Which evidence should the engineer examine FIRST?
- Inspect tenant identifiers, user groups, row access policies, and sample access tests.
- Review lineage, approval records, data quality checks, and access destinations.
- Inspect subscriber relationships, listing permissions, audit events, and data ownership.
- Review publisher datasets, subscription requirements, usage agreements, and IAM permissions.
Explanation
Correct Answer
D:Review publisher datasets, subscription requirements, usage agreements, and IAM permissions. This evidence directly tests the uncertain part of the described system. Governed BigQuery sharing can provide authorized access to publisher datasets through supported sharing models. A controlled response is: Publish a controlled BigQuery sharing listing and grant only approved subscriber access.
Incorrect Answers
A:Inspect tenant identifiers, user groups, row access policies, and sample access tests. This addresses a different situation: A SaaS analytics platform hosts multiple tenant records in one BigQuery table, and users may see only their organization's rows. The current scenario instead calls for the more directly applicable investigation: Review publisher datasets, subscription requirements, usage agreements, and IAM permissions. The reason is that governed BigQuery sharing can provide authorized access to publisher datasets through supported sharing models.
B:Review lineage, approval records, data quality checks, and access destinations. This addresses a different situation: A finance department publishes unreviewed experiment tables to the company-wide BI directory and consumers treat them as financial statements. The current scenario instead calls for the more directly applicable investigation: Review publisher datasets, subscription requirements, usage agreements, and IAM permissions. The reason is that governed BigQuery sharing can provide authorized access to publisher datasets through supported sharing models.
C:Inspect subscriber relationships, listing permissions, audit events, and data ownership. This addresses a different situation: A business data provider wants to revoke a partner's access to an outdated analytics feed without invalidating access for other subscribers. The current scenario instead calls for the more directly applicable investigation: Review publisher datasets, subscription requirements, usage agreements, and IAM permissions. The reason is that governed BigQuery sharing can provide authorized access to publisher datasets through supported sharing models.
Question 481
A Google Cloud architecture review finds: A Spark job writes millions of tiny Parquet objects, causing large listing overhead and poor query performance across the lake. Which principle BEST explains the underlying data-engineering risk?
- Lake query performance depends on file sizing, layout, and processing format, not only total bytes.
- A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage.
- Intermediate-data retention should follow business utility, lineage, and compliance policy.
- Lake security should enforce data-domain access and classification boundaries.
Explanation
Correct Answer
A:Lake query performance depends on file sizing, layout, and processing format, not only total bytes. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Inspect average object size, file counts, partition layout, and scan timings. A focused corrective action is: Compact small files into appropriately sized objects with validated partitioning and recovery plans.
Incorrect Answers
B:A useful data lake needs catalog metadata and lifecycle governance, not only cheap object storage. This addresses a different situation: Researchers place thousands of raw objects in a data lake and cannot identify schemas, ownership, or classification. The current scenario instead calls for the more directly applicable principle: Lake query performance depends on file sizing, layout, and processing format, not only total bytes. The reason is that lake query performance depends on file sizing, layout, and processing format, not only total bytes.
C:Intermediate-data retention should follow business utility, lineage, and compliance policy. This addresses a different situation: A lake accumulates experimental intermediate outputs that cost more than final retained datasets and lacks automated expiration. The current scenario instead calls for the more directly applicable principle: Lake query performance depends on file sizing, layout, and processing format, not only total bytes. The reason is that lake query performance depends on file sizing, layout, and processing format, not only total bytes.
D:Lake security should enforce data-domain access and classification boundaries. This addresses a different situation: A research lake contains both public scientific data and restricted patient samples under one bucket with unrestricted reader roles. The current scenario instead calls for the more directly applicable principle: Lake query performance depends on file sizing, layout, and processing format, not only total bytes. The reason is that lake query performance depends on file sizing, layout, and processing format, not only total bytes.
Question 482
Before modifying the data platform, the team observes: Daily vendor deliveries contain multipart files with duplicate names and changing schemas, making ingestion traceability unreliable. Which evidence should the engineer examine FIRST?
- Measure arrival rates, message ordering requirements, retention, and subscriber service objectives.
- Review TLS requirements, authenticated endpoints, data classification, and bucket IAM.
- Review API quotas, response headers, batch windows, and rate-limit failures.
- Inspect object names, source timestamps, hash manifests, schemas, and duplicate deliveries.
Explanation
Correct Answer
D:Inspect object names, source timestamps, hash manifests, schemas, and duplicate deliveries. This evidence directly tests the uncertain part of the described system. Immutable landing identity and manifest metadata enable replay and operational reconciliation. A controlled response is: Adopt versioned landing paths and idempotent manifest processing before transformation.
Incorrect Answers
A:Measure arrival rates, message ordering requirements, retention, and subscriber service objectives. This addresses a different situation: Thousands of store devices publish small events unpredictably, and downstream systems must process them independently without blocking publishers. The current scenario instead calls for the more directly applicable investigation: Inspect object names, source timestamps, hash manifests, schemas, and duplicate deliveries. The reason is that immutable landing identity and manifest metadata enable replay and operational reconciliation.
B:Review TLS requirements, authenticated endpoints, data classification, and bucket IAM. This addresses a different situation: A partner uploads raw customer records by custom API, but the team has not assessed encryption in transit or destination access. The current scenario instead calls for the more directly applicable investigation: Inspect object names, source timestamps, hash manifests, schemas, and duplicate deliveries. The reason is that immutable landing identity and manifest metadata enable replay and operational reconciliation.
C:Review API quotas, response headers, batch windows, and rate-limit failures. This addresses a different situation: A customer-relationship API imposes quotas, but ingestion code launches thousands of concurrent requests during a nightly backfill. The current scenario instead calls for the more directly applicable investigation: Inspect object names, source timestamps, hash manifests, schemas, and duplicate deliveries. The reason is that immutable landing identity and manifest metadata enable replay and operational reconciliation.
Question 483
A Google Cloud data engineer is addressing: Customer support event feeds contain phone numbers and account identifiers, but most analysts require only behavioral aggregates. Which TWO complementary actions should the team take? Select TWO answers.
- Inventory PII fields, consumer roles, retention policies, and approved de-identification requirements.
- Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity.
- Enable and retain required audit events with protected sinks and monitored access policies.
- De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset.
- Use a dedicated worker service account with minimal permissions on approved source and destination resources.
Explanation
Correct Answers
A:Inventory PII fields, consumer roles, retention policies, and approved de-identification requirements. This is the applicable diagnostic investigation. Its complementary step is: De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset. Together they address: Minimizing personal data exposure reduces risk while preserving necessary analytical utility.
D:De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset. This is the applicable controlled engineering response. Its complementary step is: Inventory PII fields, consumer roles, retention policies, and approved de-identification requirements. Together they address: Minimizing personal data exposure reduces risk while preserving necessary analytical utility.
Incorrect Answers
B:Inspect projects, dataset names, service-account scopes, deployment permissions, and audit activity. This could be useful for another system: Developers test destructive transformations against the same production dataset used for regulatory reporting. For this situation, the necessary paired decisions are to examine (Inventory PII fields, consumer roles, retention policies, and approved de-identification requirements.) and to implement (De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset.).
C:Enable and retain required audit events with protected sinks and monitored access policies. This could be useful for another system: A compliance team cannot determine which identity exported a restricted BigQuery customer table last week. For this situation, the necessary paired decisions are to examine (Inventory PII fields, consumer roles, retention policies, and approved de-identification requirements.) and to implement (De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset.).
E:Use a dedicated worker service account with minimal permissions on approved source and destination resources. This could be useful for another system: A Dataflow job in a processing project reads raw data from an ingestion project but uses a broad human administrator credential. For this situation, the necessary paired decisions are to examine (Inventory PII fields, consumer roles, retention policies, and approved de-identification requirements.) and to implement (De-identify or tokenize sensitive columns upstream and publish a limited-use analytical dataset.).
Question 484
A Google Cloud architecture review finds: A customer-relationship API imposes quotas, but ingestion code launches thousands of concurrent requests during a nightly backfill. Which principle BEST explains the underlying data-engineering risk?
- Ingestion networking and encryption must align with connectivity and trust boundaries.
- Low-latency operational analytics need a streaming path with bounded end-to-end delay.
- Decoupled messaging can buffer variable event rates and isolate independent consumers.
- Pipeline design must respect source-system limits and use controlled retries or backoff.
Explanation
Correct Answer
D:Pipeline design must respect source-system limits and use controlled retries or backoff. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Review API quotas, response headers, batch windows, and rate-limit failures. A focused corrective action is: Introduce bounded concurrency, checkpointed pagination, and exponential backoff with jitter.
Incorrect Answers
A:Ingestion networking and encryption must align with connectivity and trust boundaries. This addresses a different situation: An internal ERP system sends sensitive database extracts to Google Cloud but security rules prohibit unrestricted internet endpoints. The current scenario instead calls for the more directly applicable principle: Pipeline design must respect source-system limits and use controlled retries or backoff. The reason is that pipeline design must respect source-system limits and use controlled retries or backoff.
B:Low-latency operational analytics need a streaming path with bounded end-to-end delay. This addresses a different situation: A payment service must detect suspicious transaction patterns within seconds rather than after overnight aggregation. The current scenario instead calls for the more directly applicable principle: Pipeline design must respect source-system limits and use controlled retries or backoff. The reason is that pipeline design must respect source-system limits and use controlled retries or backoff.
C:Decoupled messaging can buffer variable event rates and isolate independent consumers. This addresses a different situation: Thousands of store devices publish small events unpredictably, and downstream systems must process them independently without blocking publishers. The current scenario instead calls for the more directly applicable principle: Pipeline design must respect source-system limits and use controlled retries or backoff. The reason is that pipeline design must respect source-system limits and use controlled retries or backoff.
Question 485
Before modifying the data platform, the team observes: A fraud model reports 99 percent accuracy on data where only one in a thousand transactions is fraudulent. Which evidence should the engineer examine FIRST?
- Inspect model creation SQL, source table snapshots, parameters, and evaluation history.
- Inspect feature timestamps, training joins, holdout splits, and online availability.
- Inspect document types, OCR quality, extracted text, language detection, and document access.
- Review class prevalence, confusion matrix, thresholds, and missed-fraud cost.
Explanation
Correct Answer
D:Review class prevalence, confusion matrix, thresholds, and missed-fraud cost. This evidence directly tests the uncertain part of the described system. Imbalanced classification requires precision, recall, and business-cost analysis beyond accuracy. A controlled response is: Evaluate the model using appropriate metrics and select a reviewed operating threshold.
Incorrect Answers
A:Inspect model creation SQL, source table snapshots, parameters, and evaluation history. This addresses a different situation: A data scientist overwrites a BigQuery ML model each week and has no record of which training window produced the current predictions. The current scenario instead calls for the more directly applicable investigation: Review class prevalence, confusion matrix, thresholds, and missed-fraud cost. The reason is that imbalanced classification requires precision, recall, and business-cost analysis beyond accuracy.
B:Inspect feature timestamps, training joins, holdout splits, and online availability. This addresses a different situation: A churn model trains on a cancellation timestamp that becomes known only after the customer leaves, producing unrealistic validation accuracy. The current scenario instead calls for the more directly applicable investigation: Review class prevalence, confusion matrix, thresholds, and missed-fraud cost. The reason is that imbalanced classification requires precision, recall, and business-cost analysis beyond accuracy.
C:Inspect document types, OCR quality, extracted text, language detection, and document access. This addresses a different situation: A records team ingests scanned PDFs for semantic search but indexes raw unreadable binary bytes as if they were meaningful text. The current scenario instead calls for the more directly applicable investigation: Review class prevalence, confusion matrix, thresholds, and missed-fraud cost. The reason is that imbalanced classification requires precision, recall, and business-cost analysis beyond accuracy.
Question 486
A Google Cloud architecture review finds: Analysts need aggregate insurance-risk reporting while only authorized reviewers may see exact claimant identifiers. Which principle BEST explains the underlying data-engineering risk?
- BI access must be governed at the data source and warehouse layer, not inferred from dashboard appearance.
- Partition pruning depends on eligible predicates that the query planner can use.
- BI integrations should use parameterized queries and scoped read-only service identities.
- Dynamic masking and column access policies can limit sensitive detail without removing analytical utility.
Explanation
Correct Answer
D:Dynamic masking and column access policies can limit sensitive detail without removing analytical utility. This principle identifies the relevant workload or governance requirement. The engineer should first examine: Inspect dataset grants, policy tags, masking roles, and existing report queries. A focused corrective action is: Apply supported BigQuery data masking policies and verify behavior for each role.
Incorrect Answers
A:BI access must be governed at the data source and warehouse layer, not inferred from dashboard appearance. This addresses a different situation: A marketing dashboard in Looker Studio displays performance summaries but the configured data source grants unrestricted access to restricted BigQuery customer fields. The current scenario instead calls for the more directly applicable principle: Dynamic masking and column access policies can limit sensitive detail without removing analytical utility. The reason is that dynamic masking and column access policies can limit sensitive detail without removing analytical utility.
B:Partition pruning depends on eligible predicates that the query planner can use. This addresses a different situation: An analyst filters a partitioned BigQuery table by wrapping the partition column in a complex function and sees a costly full scan. The current scenario instead calls for the more directly applicable principle: Dynamic masking and column access policies can limit sensitive detail without removing analytical utility. The reason is that dynamic masking and column access policies can limit sensitive detail without removing analytical utility.
C:BI integrations should use parameterized queries and scoped read-only service identities. This addresses a different situation: A dashboard generates dynamic SQL by concatenating raw user text into filters and risks malformed or unsafe queries. The current scenario instead calls for the more directly applicable principle: Dynamic masking and column access policies can limit sensitive detail without removing analytical utility. The reason is that dynamic masking and column access policies can limit sensitive detail without removing analytical utility.
Question 487
The data engineering team must correct this issue: A company acquires another business and wants consistent discovery and access classification across existing BigQuery and Cloud Storage assets. Which controlled engineering action is MOST appropriate?
- Create an approved Dataplex Catalog classification approach and map existing assets into it.
- Implement a governed lakehouse catalog and role model that avoids bypass through raw object access.
- Establish federated roles and a platform operating model with common policies and domain exceptions.
- Publish a versioned data contract with quality monitoring and consumer notification.
Explanation
Correct Answer
A:Create an approved Dataplex Catalog classification approach and map existing assets into it. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: A search returns both businesses' governed assets with consistent sensitivity attributes. A central catalog and policy taxonomy can help govern multiple analytical storage systems.
Incorrect Answers
B:Implement a governed lakehouse catalog and role model that avoids bypass through raw object access. This addresses a different situation: Data teams use Cloud Storage for open formats and BigQuery for SQL, but each engine applies incompatible permissions to the same sensitive records. The current scenario instead calls for the more directly applicable engineering action: Create an approved Dataplex Catalog classification approach and map existing assets into it. The reason is that a central catalog and policy taxonomy can help govern multiple analytical storage systems.
C:Establish federated roles and a platform operating model with common policies and domain exceptions. This addresses a different situation: A global enterprise distributes data ownership to regional teams but needs one standard for naming, retention, and access requests. The current scenario instead calls for the more directly applicable engineering action: Create an approved Dataplex Catalog classification approach and map existing assets into it. The reason is that a central catalog and policy taxonomy can help govern multiple analytical storage systems.
D:Publish a versioned data contract with quality monitoring and consumer notification. This addresses a different situation: An internal data product is advertised as reliable, but consumers receive schema changes and delayed data without notice. The current scenario instead calls for the more directly applicable engineering action: Create an approved Dataplex Catalog classification approach and map existing assets into it. The reason is that a central catalog and policy taxonomy can help govern multiple analytical storage systems.
Question 488
The data engineering team must correct this issue: A production ELT workflow pulls arbitrary local workspace changes without approvals, creating nondeterministic table definitions. Which controlled engineering action is MOST appropriate?
- Use approved Dataform release configurations and workflow schedules bound to reviewed code.
- Create a parameterized backfill DAG with ordered readiness checks and bounded parallelism.
- Design tasks with stable run identifiers and safe retries or external deduplication.
- Add supported retry conditions and exponential backoff with safe step checkpointing.
Explanation
Correct Answer
A:Use approved Dataform release configurations and workflow schedules bound to reviewed code. This addresses the specific problem while respecting business and technical constraints. Validate it by checking: Two runs at the same approved revision apply expected transformations without unreviewed edits. Versioned compilation and scheduled production execution improve repeatability and change control.
Incorrect Answers
B:Create a parameterized backfill DAG with ordered readiness checks and bounded parallelism. This addresses a different situation: A yearly backfill invokes all daily dependent tasks concurrently, while downstream aggregation assumes every day is already complete. The current scenario instead calls for the more directly applicable engineering action: Use approved Dataform release configurations and workflow schedules bound to reviewed code. The reason is that versioned compilation and scheduled production execution improve repeatability and change control.
C:Design tasks with stable run identifiers and safe retries or external deduplication. This addresses a different situation: An Airflow DAG reruns after scheduler recovery and reissues the same external billing update twice. The current scenario instead calls for the more directly applicable engineering action: Use approved Dataform release configurations and workflow schedules bound to reviewed code. The reason is that versioned compilation and scheduled production execution improve repeatability and change control.
D:Add supported retry conditions and exponential backoff with safe step checkpointing. This addresses a different situation: A managed API intermittently returns 503, causing a multi-step data export workflow to fail permanently without preserving state. The current scenario instead calls for the more directly applicable engineering action: Use approved Dataform release configurations and workflow schedules bound to reviewed code. The reason is that versioned compilation and scheduled production execution improve repeatability and change control.
Question 489
A Google Cloud data engineer is addressing: Developers change Dataflow transform logic directly in production with no version tags or regression tests. Which TWO complementary actions should the team take? Select TWO answers.
- Add a reviewed CI pipeline with unit/integration tests and controlled Dataflow template promotion.
- Use stable idempotency keys or transactional checkpoints before retrying external exports.
- Review repository branches, build artifacts, test cases, and environment permissions.
- Inspect template options, bucket identifiers, worker identities, and region restrictions.
- Inspect Dataform repositories, release configurations, workflow invocations, and IAM scopes.
Explanation
Correct Answers
A:Add a reviewed CI pipeline with unit/integration tests and controlled Dataflow template promotion. This is the applicable controlled engineering response. Its complementary step is: Review repository branches, build artifacts, test cases, and environment permissions. Together they address: Data pipeline CI/CD should validate schema, code, and deployment before production promotion.
C:Review repository branches, build artifacts, test cases, and environment permissions. This is the applicable diagnostic investigation. Its complementary step is: Add a reviewed CI pipeline with unit/integration tests and controlled Dataflow template promotion. Together they address: Data pipeline CI/CD should validate schema, code, and deployment before production promotion.
Incorrect Answers
B:Use stable idempotency keys or transactional checkpoints before retrying external exports. This could be useful for another system: A pipeline triggers an invoice-export API and Airflow retries the task after a timeout, sending the same invoice twice. For this situation, the necessary paired decisions are to examine (Review repository branches, build artifacts, test cases, and environment permissions.) and to implement (Add a reviewed CI pipeline with unit/integration tests and controlled Dataflow template promotion.).
D:Inspect template options, bucket identifiers, worker identities, and region restrictions. This could be useful for another system: The same Dataflow template should run in staging and production but contains hardcoded staging bucket names and service-account references. For this situation, the necessary paired decisions are to examine (Review repository branches, build artifacts, test cases, and environment permissions.) and to implement (Add a reviewed CI pipeline with unit/integration tests and controlled Dataflow template promotion.).
E:Inspect Dataform repositories, release configurations, workflow invocations, and IAM scopes. This could be useful for another system: A team builds new SQL models in a development workspace but schedules them against production datasets using the same credentials. For this situation, the necessary paired decisions are to examine (Review repository branches, build artifacts, test cases, and environment permissions.) and to implement (Add a reviewed CI pipeline with unit/integration tests and controlled Dataflow template promotion.).
Question 490
After applying the change, the team re-examines this condition: A Dataflow group-by-key stage slows because almost all events share one constant grouping value. Which result BEST verifies the improvement?
- A seeded malformed value is visible with cause and does not silently enter clean output.
- A forced retry does not create a duplicate invoice at the external system.
- An injected delayed older update cannot replace the latest committed source state.
- A representative heavy-key workload scales without one worker dominating processing time.
Explanation
Correct Answer
D:A representative heavy-key workload scales without one worker dominating processing time. This measures the intended corrected behavior rather than only confirming a setting. Implemented action: Redesign the aggregation key or introduce valid fan-out patterns where supported. Skewed keys can serialize distributed work and degrade parallel pipeline throughput.
Incorrect Answers
A:A seeded malformed value is visible with cause and does not silently enter clean output. This addresses a different situation: A Dataflow JavaScript or Python user-defined transform catches every exception and returns an empty record, hiding thousands of failed rows. The current scenario instead calls for the more directly applicable verification result: A representative heavy-key workload scales without one worker dominating processing time. The reason is that skewed keys can serialize distributed work and degrade parallel pipeline throughput.
B:A forced retry does not create a duplicate invoice at the external system. This addresses a different situation: An engineer claims an exactly-once Dataflow pipeline makes arbitrary external API side effects impossible to duplicate. The current scenario instead calls for the more directly applicable verification result: A representative heavy-key workload scales without one worker dominating processing time. The reason is that skewed keys can serialize distributed work and degrade parallel pipeline throughput.
C:An injected delayed older update cannot replace the latest committed source state. This addresses a different situation: Datastream CDC events sometimes reach the destination out of order after reconnection and older rows overwrite current values. The current scenario instead calls for the more directly applicable verification result: A representative heavy-key workload scales without one worker dominating processing time. The reason is that skewed keys can serialize distributed work and degrade parallel pipeline throughput.