Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ291

Designing for security and compliance

A primary business objective is to be able to trust the data stored in your application. You want to record every change to the application data.

How can you design the logging system to verify the authenticity of its logs?

  • A Write the log concurrently in the cloud and on premises
  • B Use a SQL database and limit who can modify the log table
  • C Digitally sign each timestamp and log entry and store the signature
  • D Create a JSON dump of each log entry and store it in Google Cloud Storage
Explanation

Digital signatures cryptographically bind each timestamp and log entry to the signer. A valid signature can be verified later, and any modification to the signed content invalidates it, providing evidence of log integrity and authenticity.

Community Discussion

No comments yet. Be the first to start the discussion!