Professional Security Operations EngineerDemo

By Google · Question Mode

QuestionQ80

Platform operations

You scheduled a Google Security Operations (SecOps) report to export its results to a BigQuery dataset in your Google Cloud project. The report runs successfully in Google SecOps, but no data is shown in the dataset. You verified that the dataset exists. How should you resolve this export failure?

  • A Grant the Google SecOps service account the roles/iam.serviceAccountUser IAM role to itself.
  • B Set a retention period for the BigQuery export.
  • C Grant the user account that scheduled the report the roles/bigquery.dataEditor IAM role on the project.
  • D Grant the Google SecOps service account the roles/bigquery.dataEditor IAM role on the dataset.
Explanation

The Google SecOps service account performs the export and must be able to create and write data in the target BigQuery dataset. Granting it the roles/bigquery.dataEditor IAM role on that dataset supplies the necessary destination write permissions while limiting access to the affected dataset.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!