Quiz — Question 3

Cymbal Bank stores its most sensitive customer data in a specific BigQuery dataset. Alice is worried about a "copy-paste" threat: a developer with legitimate access to the BigQuery dataset might accidentally or intentionally copy that data into a personal, external Cloud Storage bucket that is outside of the bank’s control.

What security feature should Alice use to create a perimeter that prevents this specific type of data exfiltration?