PROFESSIONAL-DATA-ENGINEER · Question #387
Your organization uses a multi-cloud data storage strategy, storing data in Cloud Storage, and data in Amazon Web Services' (AWS) S3 storage buckets. All data resides in US regions. You want to…
The correct answer is A. Setup a BigQuery Omni connection to the AWS S3 bucket data. Create BigLake tables over the Cloud Storage and S3 data and query the data using BigQuery. Option A is correct because BigQuery Omni enables querying AWS S3 data directly from BigQuery without moving it, and BigLake tables are specifically designed to enforce access control through the BigQuery connection - meaning users query via BigQuery's IAM without ever needing…
Question
Options
- ASetup a BigQuery Omni connection to the AWS S3 bucket data. Create BigLake tables over the Cloud Storage and S3 data and query the data using BigQuery
- BSet up a BigQuery Omni connection to the AWS S3 bucket data. Create external tables over the Cloud Storage and S3 data and query the data using
- CUse the Storage Transfer Service to copy data from the AWS S3 buckets to Cloud Storage buckets. Create BigLake tables over the Cloud Storage data and
- DUse the Storage Transfer Service to copy data from the AWS S3 buckets to Cloud Storage buckets. Create external tables over the Cloud Storage data and
How the community answered
(48 responses)- A58% (28)
- B25% (12)
- C13% (6)
- D4% (2)
Explanation
Option A is correct because BigQuery Omni enables querying AWS S3 data directly from BigQuery without moving it, and BigLake tables are specifically designed to enforce access control through the BigQuery connection - meaning users query via BigQuery's IAM without ever needing direct permissions on the underlying storage buckets.
Option B fails because standard external tables do not enforce the same access delegation layer that BigLake provides; users querying external tables typically still require direct storage permissions, violating the requirement to hide bucket access.
Options C and D fail for the same root reason: using Storage Transfer Service to copy S3 data into Cloud Storage means the data is no longer "up-to-date" (it's a snapshot copy), and you lose the multi-cloud querying capability - BigQuery would only be reading GCP data at that point.
Memory tip: Think BigLake = Big access control. The "Lake" acts as a gatekeeper - it lets BigQuery be the only door users walk through, keeping the raw storage buckets locked away. Whenever an exam question mentions "query without giving direct bucket access," BigLake is almost certainly involved.
Topics
Community Discussion
No community discussion yet for this question.