nerdexam
Google

PROFESSIONAL-DATA-ENGINEER · Question #387

Your organization uses a multi-cloud data storage strategy, storing data in Cloud Storage, and data in Amazon Web Services' (AWS) S3 storage buckets. All data resides in US regions. You want to…

The correct answer is A. Setup a BigQuery Omni connection to the AWS S3 bucket data. Create BigLake tables over the Cloud Storage and S3 data and query the data using BigQuery. Option A is correct because BigQuery Omni enables querying AWS S3 data directly from BigQuery without moving it, and BigLake tables are specifically designed to enforce access control through the BigQuery connection - meaning users query via BigQuery's IAM without ever needing…

Submitted by katya_ua· Mar 30, 2026Designing data processing systems

Question

Your organization uses a multi-cloud data storage strategy, storing data in Cloud Storage, and data in Amazon Web Services' (AWS) S3 storage buckets. All data resides in US regions. You want to query up-to-date data by using BigQuery, regardless of which cloud the data is stored in. You need to allow users to query the tables from BigQuery without giving direct access to the data in the storage buckets. What should you do?

Options

  • ASetup a BigQuery Omni connection to the AWS S3 bucket data. Create BigLake tables over the Cloud Storage and S3 data and query the data using BigQuery
  • BSet up a BigQuery Omni connection to the AWS S3 bucket data. Create external tables over the Cloud Storage and S3 data and query the data using
  • CUse the Storage Transfer Service to copy data from the AWS S3 buckets to Cloud Storage buckets. Create BigLake tables over the Cloud Storage data and
  • DUse the Storage Transfer Service to copy data from the AWS S3 buckets to Cloud Storage buckets. Create external tables over the Cloud Storage data and

How the community answered

(48 responses)
  • A
    58% (28)
  • B
    25% (12)
  • C
    13% (6)
  • D
    4% (2)

Explanation

Option A is correct because BigQuery Omni enables querying AWS S3 data directly from BigQuery without moving it, and BigLake tables are specifically designed to enforce access control through the BigQuery connection - meaning users query via BigQuery's IAM without ever needing direct permissions on the underlying storage buckets.

Option B fails because standard external tables do not enforce the same access delegation layer that BigLake provides; users querying external tables typically still require direct storage permissions, violating the requirement to hide bucket access.

Options C and D fail for the same root reason: using Storage Transfer Service to copy S3 data into Cloud Storage means the data is no longer "up-to-date" (it's a snapshot copy), and you lose the multi-cloud querying capability - BigQuery would only be reading GCP data at that point.

Memory tip: Think BigLake = Big access control. The "Lake" acts as a gatekeeper - it lets BigQuery be the only door users walk through, keeping the raw storage buckets locked away. Whenever an exam question mentions "query without giving direct bucket access," BigLake is almost certainly involved.

Topics

#BigQuery Omni#BigLake Tables#Multi-cloud#Data Governance

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-DATA-ENGINEER Practice