Google Professional Cloud Database Engineer Question 65
Select 3Google Cloud PlatformYour company uses Cloud SQL for hosting its relational databases and needs to ensure compliance with internal auditing requirements. You are tasked with assessing the auditing policies for Cloud SQL. Which actions should you take to meet these requirements?
- A
Enable Cloud Audit Logs for Cloud SQL to track administrative and data access activities.
- B
Configure a custom logging solution outside of Google Cloud to capture audit logs.
- C
Verify that 'Admin Activity' logs are enabled in Cloud Audit Logs for Cloud SQL.
- D
Enable the 'Data Access' logs in Cloud Audit Logs for Cloud SQL to capture queries made by users.
- E
Enable binary logging in Cloud SQL to capture all changes made to the database data.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet auditing requirements for Cloud SQL, you need to leverage Google Cloud's native Cloud Audit Logs, which include 'Admin Activity' and 'Data Access' logs. These logs provide a comprehensive view of administrative actions and data interactions. External solutions or features like binary logging are not designed specifically for auditing and are not sufficient to ensure compliance.
- A. Correct.
Correct: Enabling Cloud Audit Logs for Cloud SQL is essential for tracking administrative and data access activities, which are key to meeting auditing requirements.
- B. Incorrect.
Incorrect: While external logging solutions can complement auditing, Google Cloud’s native Cloud Audit Logs are specifically designed for compliance and are the recommended approach.
- C. Correct.
Correct: Admin Activity logs in Cloud Audit Logs record administrative actions, such as configuration changes, which are critical for auditing.
- D. Correct.
Correct: Data Access logs in Cloud Audit Logs capture queries and other data access activities, providing visibility into user interactions with the database.
- E. Incorrect.
Incorrect: Binary logging is primarily used for replication and point-in-time recovery, not for auditing purposes.