Google Associate Cloud Engineer Question 334
Select 3Google Cloud PlatformAs a Google Cloud Associate Cloud Engineer, you are tasked with ensuring that all administrative actions on your project's Compute Engine resources are logged for auditing purposes. Which of the following steps should you take to configure audit logging correctly?
- A
Enable Data Access audit logs for the Compute Engine API.
- B
Ensure that the Cloud Audit Logs API is enabled in your project.
- C
Grant the required IAM roles to the user who will view the audit logs.
- D
Set up a Cloud Function to export logs to BigQuery.
Show answer and explanation
Correct answers: A, B, C
Explanation
To ensure administrative actions are logged, you need to enable Data Access audit logs for the relevant API, ensure the Cloud Audit Logs API is enabled, and grant appropriate IAM roles to users who need to view the logs. Exporting logs to BigQuery is optional and not part of the initial configuration for audit logging.
- A. Correct.
Data Access audit logs include admin read and write operations, which are needed for auditing administrative actions.
- B. Correct.
Cloud Audit Logs API must be enabled to record audit logs for your Google Cloud services.
- C. Correct.
Users need appropriate IAM roles, such as 'Logs Viewer', to access and view audit logs.
- D. Incorrect.
While exporting logs to BigQuery can be useful for analysis, it is not required for configuring audit logs.