Google
PROFESSIONAL-DATA-ENGINEER · Question #320
You want to encrypt the customer data stored in BigQuery. You need to implement per-user crypto-deletion on data stored in your tables. You want to adopt native features in Google Cloud to avoid…
The correct answer is A. Implement Authenticated Encryption with Associated Data (AEAD) BigQuery functions while storing your data in BigQuery. You've hit your limit · resets 5am (America/New_York)
Submitted by andreas_gr· Mar 30, 2026Ensuring solution quality
Question
You want to encrypt the customer data stored in BigQuery. You need to implement per-user crypto-deletion on data stored in your tables. You want to adopt native features in Google Cloud to avoid custom solutions. What should you do?
Options
- AImplement Authenticated Encryption with Associated Data (AEAD) BigQuery functions while storing your data in BigQuery.
- BCreate a customer-managed encryption key (CMEK) in Cloud KMS. Associate the key to the table while creating the table.
- CCreate a customer-managed encryption key (CMEK) in Cloud KMS. Use the key to encrypt data before storing in BigQuery.
- DEncrypt your data during ingestion by using a cryptographic library supported by your ETL pipeline.
How the community answered
(30 responses)- A60% (18)
- B10% (3)
- C23% (7)
- D7% (2)
Explanation
You've hit your limit · resets 5am (America/New_York)
Topics
#AEAD encryption#crypto-deletion#BigQuery encryption#CMEK
Community Discussion
No community discussion yet for this question.