Google Associate Cloud Engineer Exam - Topic 7 Question 39 Discussion

Actual exam question for Google's Associate Cloud Engineer exam

Question #: 39
Topic #: 7

[All Associate Cloud Engineer Questions]

You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?

AEnable the Identity Aware Proxy API on the project.

BScan the bucker using the Data Loss Prevention API.

CAllow only a single Service Account access to read the data.

DEnable Data Access audit logs for the Cloud Storage API.

Show Suggested Answer

Suggested Answer: D

https://cloud.google.com/storage/docs/audit-logs

by Scarlet at May 03, 2022, 08:25 PM

Limited Time Offer

25%

Off

Get Premium Associate Cloud Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Graciela

5 months ago

B seems more relevant for data protection, not logging.

upvoted 0 times

...

Alita

5 months ago

Wait, can you really track all read requests with just that?

upvoted 0 times

...

Maxima

5 months ago

Totally agree with D, it's essential for compliance!

upvoted 0 times

...

Mattie

5 months ago

I think A is more about access control, not logging.

upvoted 0 times

...

Tiffiny

5 months ago

D is definitely the way to go for audit logs.

upvoted 0 times

...

Glynda

5 months ago

I definitely recall that audit logs are crucial for compliance, so option D seems like the best choice.

upvoted 0 times

...

Nicholle

5 months ago

I feel like scanning the bucket with the Data Loss Prevention API is more about data protection than logging access.

upvoted 0 times

...

Lajuana

5 months ago

I'm not entirely sure, but I remember something about the Identity Aware Proxy being more about access control than logging requests.

upvoted 0 times

...

Hyman

5 months ago

I think enabling Data Access audit logs is the right move here. It sounds familiar from the practice questions we did.

upvoted 0 times

...

Elin

6 months ago

This seems like a pretty straightforward password cracking question. I'd probably go with password spraying since that's designed to avoid account lockout.

upvoted 0 times

...

Lenita

6 months ago

Okay, I remember learning that the license files are stored in the secure directory, so I'm going to go with option A.

upvoted 0 times

...

Stephen

6 months ago

Okay, I know Bitcoin and Ethereum use Proof of Work, so I'll definitely select those. The other options are less familiar to me, so I'll have to guess on those.

upvoted 0 times

...