Google Associate Cloud Engineer Question 331
Select 2Google Cloud PlatformYou are a Google Cloud Engineer responsible for managing the audit logs for a project in Google Cloud Platform. You need to ensure that all Admin Activity logs and Data Access logs are enabled for a specific service in your project. Which of the following actions should you take?
- A
A. Navigate to the IAM & Admin section in the Google Cloud Console and enable the necessary logs.
- B
B. Use the gcloud command-line tool to set the logging configuration for the service.
- C
C. Ensure that the Cloud Logging API is enabled for your project.
- D
D. Modify the log sinks to include the specific service you want to track.
- E
E. Use the Google Cloud Console to set up a budget alert to monitor log usage.
Show answer and explanation
Correct answers: B, C
Explanation
To ensure that Admin Activity logs and Data Access logs are enabled for a specific service, you need to configure logging settings for that service, which can be done using the gcloud command-line tool. Additionally, the Cloud Logging API must be enabled in your project to allow for the collection and storage of audit logs. These steps ensure that audit logs are properly captured for the services you are managing.
- A. Incorrect.
A. The IAM & Admin section allows you to manage roles and permissions, but enabling specific audit logs requires configuring logging settings.
- B. Correct.
B. The gcloud command-line tool can be used to configure logging settings, including enabling specific types of audit logs for a service.
- C. Correct.
C. The Cloud Logging API must be enabled to capture and store audit logs for services in your project.
- D. Incorrect.
D. Log sinks are used for exporting logs, not for enabling or configuring audit logs for specific services.
- E. Incorrect.
E. Budget alerts are related to cost management and do not impact the configuration of audit logs.