Practice Test 3 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
Using the principle of least privilege and allowing for maximum automation, what steps can you take to store audit logs for long-term access and to allow access for external auditors to view? (Select TWO)
A. Create account for auditors to have view access to Operations Suite (formerly Stackdriver) Logging.
B. Export audit logs to Cloud Storage via an export sink.
C. Export audit logs to BigQuery via an export sink.
D. Create account for auditors to have view access to export storage bucket with the Storage Object Viewer role.
Correct Answers: B and D
A – Create an account for auditors to have view access to Operations Suite (formerly Stackdriver) Logging – continue storing log information in Operations Suite (formerly Stackdriver) is not a proper solution for “Long term access”.
Between B and C, the difference is where to store the logs, BigQuery or Cloud Storage. Since the main concern is extended storing period, B (Correct Answer) is a better answer, and the “Long term access” further qualifies it, for example, using the Coldline storage class.
With regards to BigQuery, while it is also a low-cost storage, but the main purpose is for analysis. Also, logs stored in Cloud Storage is easy to transport to BigQuery or do query directly against the files saved in Cloud Storage if and whenever needed.
D (Correct Answer) – Create an account for auditors to have view access to the export storage bucket with the Storage Object Viewer role – this completes the answers by providing a view-only role to the auditors
Comments are closed, but trackbacks and pingbacks are open.