Practice Associate-Data-Practitioner Exam Online

Question 1

Your retail organization stores sensitive application usage data in Cloud Storage. You need to encrypt the data without the operational overhead of managing encryption keys. What should you do?

A : Use Google-managed encryption keys (GMEK).

B : Use customer-managed encryption keys (CMEK).

C : Use customer-supplied encryption keys (CSEK).

D :

Use customer-supplied encryption keys (CSEK) for the sensitive data and customer-managed encryption keys (CMEK) for the less sensitive data.

Answer: A

Question 2

An organization wants to keep track of different versions of their customer churn prediction model, ensuring that each version’s metadata, performance metrics, and deployment status are easily accessible. What should they prioritize in Vertex AI Model Registry to manage these requirements?

A : Scheduling batch predictions on model versions to assess performance

B : Storing models as binary files

C : Organizing models in Google Sheets with their metrics and deployment statuses

D : Using tags to label models with version numbers and descriptions

Answer: D

Question 3

A company wants to process customer purchase data in near real-time to update their analytics dashboard. The data should go through some transformation and enrichment steps before being loaded into BigQuery. Which of the following pipeline designs would best meet this requirement?

A : Use Pub/Sub to capture streaming data from the application, then use Dataflow to transform and enrich the data before loading it into BigQuery.

B : Write a Cloud Function to read data from a file in Cloud Storage whenever the file is updated, process it, and load it into BigQuery.

C : Set up Cloud Dataprep to transform the data, then use a batch job to load the data into BigQuery every hour.

D : Set up a Cloud Scheduler job to trigger the pipeline every minute, pulling data from the database, transforming it, and loading it into BigQuery.

Answer: A

Question 4

A healthcare organization needs to store sensitive patient data in Cloud Storage while meeting strict compliance requirements under HIPAA. To maximize control over encryption keys and support security audits, they are considering various encryption key management options. Which encryption approach should they choose?

A : Customer-supplied encryption keys (CSEK) to provide full control over key management and store the encryption keys outside Google Cloud.

B : Customer-managed encryption keys (CMEK) with Cloud Key Management Service (KMS) for centralized control and compliance logging.

C : Enable default encryption, as it is sufficient to meet HIPAA requirements without additional configuration.

D : Google-managed encryption keys (GMEK) for seamless encryption and automatic key management.

Answer: B

Question 5

An e-commerce company is looking to implement Cloud Key Management Service (Cloud KMS) for managing encryption keys associated with its data stored in Google Cloud Storage, BigQuery, and Compute Engine. The team is concerned about security best practices, key lifecycle management, and minimizing operational overhead. Which of the following actions is supported by Cloud KMS and aligns best with the company’s objectives of secure key management and lifecycle automation?

A : Set up Cloud KMS keys as Customer-Supplied Encryption Keys (CSEK) for Compute Engine VMs.

B : Directly manage and rotate keys stored in Google Cloud KMS within the Google Cloud Console.

C : Enable auditing of key access events through Cloud KMS and Cloud Logging for tracking compliance.

D : Automatically rotate Cloud KMS keys every 90 days and keep the previous versions for reference.

Answer: C

Name:	Google Cloud Associate Data Practitioner (ADP)
Exam Code:	Associate-Data-Practitioner
Certification:	Google Cloud Certified
Vendor:	Google
Total Questions:	405
Last Updated:	Apr 02, 2026

Google Associate-Data-Practitioner Answers