Objective 4.1
ADPConfigure access control and governance
Objective 4.1 sits in Data Management, which carries 25% of the Associate Data Practitioner exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.
Objective title verbatim from the official objectives. Google Cloud exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A user must run and query jobs in a BigQuery project but should not manage datasets or other users' jobs. Which predefined role fits least privilege?
Correct.
Concept
Least privilege grants only the permissions a task requires. Running queries needs a job-execution role, not broad administrative rights.
Why B
BigQuery Job User grants permission to run jobs, including queries, within the project.
Source
Google Cloud, BigQuery IAM roles and permissions, checked August 2026BigQuery Job User provides permissions to run jobs, including queries, within the project.
Now you: objective 4.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An analyst needs to read table data and metadata in a dataset but must not modify anything. Which BigQuery role fits?
Sample question 2 of 3
A pipeline service account must create, update, and delete tables within a dataset but not manage IAM policies on it. Which role fits?
Sample question 3 of 3
A team wants to reduce the risk of accidental data exposure by using one access system on all buckets. Which Cloud Storage setting should they choose?
That’s 3 of the full Associate Data Practitioner bank.
Keep going free: 10 questions per certification in bank practice, with no account.
Continue practisingRead the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.