Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ62

Supporting compliance requirements

Your organization has recently moved sensitive customer data into Cloud Storage buckets. For compliance reasons, you must make sure that all vendor data access and administrative access by Google personnel is logged. What should you do?

  • A Configure Data Access audit logs for Cloud Storage on the project hosting the Cloud Storage buckets.
  • B Enable Access Transparency for the organization.
  • C Configure Data Access audit logs for Cloud Storage at the organization level.
  • D Enable Access Transparency for the project hosting the Cloud Storage buckets.
Explanation

Access Transparency records actions that Google personnel take when accessing customer content, including administrative access. Cloud Audit Logs Data Access logs instead record access activity by principals in the customer's Google Cloud organization. Enabling Access Transparency for the organization provides the required scope for vendor personnel access logging.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!