Google Cloud Associate Cloud Engineer — Question 158

Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?

Answer options

• A. Turn on Data Access Logs for the buckets they want to audit, and then build a query in the log viewer that filters on Cloud Storage.
• B. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs.
• C. Assign the appropriate permissions, and then use Cloud Monitoring to review metrics.
• D. Use the export logs API to provide the Admin Activity Audit Logs in the format they want.

Correct answer: A

Explanation

The correct answer is A because enabling Data Access Logs for Cloud Storage buckets allows for detailed auditing of data access, which is what the auditor needs. Other options either focus on different types of logs or reports that do not specifically address the requirement to audit data access in Cloud Storage.