Google Cloud Professional Cloud Security Engineer — Question 211

Your organization has recently migrated sensitive customer data to Cloud Storage buckets. For compliance reasons, you must ensure that all vendor data access and administrative access by Google personnel is logged. What should you do?

Answer options

• A. Configure Data Access audit logs for Cloud Storage on the project hosting the Cloud Storage buckets.
• B. Enable Access Transparency for the organization.
• C. Configure Data Access audit logs for Cloud Storage at the organization level.
• D. Enable Access Transparency for the project hosting the Cloud Storage buckets.

Correct answer: B

Explanation

The correct answer is B because enabling Access Transparency provides detailed logs of Google personnel access to your data, which is essential for compliance. Options A and C focus on Data Access audit logs, which do not specifically cover Google personnel access. Option D only applies to project-level access and does not provide organization-wide logging.