Google Associate Cloud Engineer Question 333
Single answerGoogle Cloud PlatformYour organization has recently adopted Google Cloud Platform and requires detailed logging of all administrative activities for security compliance. Which step must be performed to ensure Data Access audit logs are enabled for all services in your project?
- A
A. Enable Data Access audit logs in the Google Cloud Console under the IAM & Admin section.
- B
B. Configure a logging sink to export logs to BigQuery for analysis.
- C
C. Use the gcloud command-line tool to enable Data Access logs at the project level.
- D
D. Enable Data Access audit logs in the Google Cloud Console under the Logging section.
Show answer and explanation
Correct answer: A
Explanation
To enable Data Access audit logs in Google Cloud Platform, you need to navigate to the IAM & Admin section in the Google Cloud Console. From there, you can configure which services' Data Access logs you want to enable. This is crucial for compliance and security purposes, as it allows your organization to track and audit all administrative activities.
- A. Correct.
Data Access audit logs can be enabled in the Google Cloud Console under the IAM & Admin section by selecting the appropriate audit log configuration for the services you want to monitor.
- B. Incorrect.
Configuring a logging sink is useful for exporting logs for analysis but does not enable Data Access audit logs themselves.
- C. Incorrect.
The gcloud command-line tool can be used for many configurations, but enabling Data Access audit logs is not directly done via gcloud.
- D. Incorrect.
The Logging section in the Google Cloud Console is for viewing and managing logs, not for enabling Data Access audit logs.