Google Cloud Professional Cloud DevOps Engineer — Question 167

Your company stores a large volume of infrequently used data in Cloud Storage. The projects in your company's CustomerService folder access Cloud Storage frequently, but store very little data. You want to enable Data Access audit logging across the company to identify data usage patterns. You need to exclude the CustomerService folder projects from Data Access audit logging. What should you do?

Answer options

• A. Enable Data Access audit logging for Cloud Storage at the organization level, and configure exempted principals to include users of the CustomerService folder.
• B. Enable Data Access audit logging for Cloud Storage at the organization level, with no additional configuration.
• C. Enable Data Access audit logging for Cloud Storage for all projects and folders other than the CustomerService folder.
• D. Enable Data Access audit logging for Cloud Storage for all projects and folders, and configure exempted principals to include users of the CustomerService folder.

Correct answer: C

Explanation

The correct answer is C because it specifically enables Data Access audit logging for all areas except the CustomerService folder, which is what you want to achieve. Option A incorrectly suggests exempting users rather than the folder itself, while B does not exclude the CustomerService folder at all. Option D also incorrectly focuses on users instead of excluding the folder.