GoogleGoogle
PROFESSIONAL-DATA-ENGINEER · Question #320
PROFESSIONAL-DATA-ENGINEER Question #320: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-DATA-ENGINEER to reveal the answer and full explanation for question #320. The question stem and answer options stay visible for context.
Submitted by andreas_gr· Mar 30, 2026
Question
You want to encrypt the customer data stored in BigQuery. You need to implement per-user crypto-deletion on data stored in your tables. You want to adopt native features in Google Cloud to avoid custom solutions. What should you do?
Options
- AImplement Authenticated Encryption with Associated Data (AEAD) BigQuery functions while storing your data in BigQuery.
- BCreate a customer-managed encryption key (CMEK) in Cloud KMS. Associate the key to the table while creating the table.
- CCreate a customer-managed encryption key (CMEK) in Cloud KMS. Use the key to encrypt data before storing in BigQuery.
- DEncrypt your data during ingestion by using a cryptographic library supported by your ETL pipeline.
Unlock PROFESSIONAL-DATA-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-DATA-ENGINEER questions. Unlock PROFESSIONAL-DATA-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.