Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ298

Designing for security and compliance

Every 12 months, auditors visit your teams and ask to review all Google Cloud Identity and Access Management (Cloud IAM) policy changes made during the preceding 12 months. You want to simplify and speed up the analysis and audit process.

What should you do?

  • A Create custom Google Stackdriver alerts and send them to the auditor
  • B Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor
  • C Use cloud functions to transfer log entries to Google Cloud SQL and use ACLs and views to limit an auditor's view
  • D Enable Google Cloud Storage (GCS) log export to audit logs into a GCS bucket and delegate access to the bucket
Explanation

Cloud Audit Logs can be routed to a BigQuery dataset for analysis. BigQuery provides SQL querying across the retained audit data, and IAM controls together with views can limit an auditor to the appropriate subset of records without granting unrestricted access to all log data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!