Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Associate Cloud Engineer Exam - Topic 8 Question 57 Discussion

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?
C) Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.
A) Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.
B) Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.
D) Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy.

Google Associate Cloud Engineer Exam - Topic 8 Question 57 Discussion

Actual exam question for Google's Associate Cloud Engineer exam
Question #: 57
Topic #: 8
[All Associate Cloud Engineer Questions]

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Gayla at Sep 22, 2022, 05:09 AM

Limited Time Offer

25%

Off

Get Premium Associate Cloud Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Fernanda
10 months ago
Custom roles seem risky, not sure if that's the way to go.
upvoted 0 times
...
Chan
10 months ago
I prefer option D, it gives more control over IAM policy changes.
upvoted 0 times
...
Carman
10 months ago
Wait, can the auditor really access all that with just roles/logging.privateLogViewer?
upvoted 0 times
...
Charlie
11 months ago
Totally agree, A makes the most sense!
upvoted 0 times
...
Terry
11 months ago
I think option A is the best choice for log access.
upvoted 0 times
...
Lucia
11 months ago
I'm leaning towards option C because creating a custom role might give more flexibility, but I'm not entirely confident about the permissions needed.
upvoted 0 times
...
Mirta
11 months ago
I feel like option B might be the right choice since it mentions reviewing IAM policy changes, which seems important for an auditor.
upvoted 0 times
...
Vannessa
11 months ago
I remember practicing a similar question where we had to assign roles for auditing, but I can't recall if the privateLogViewer role covers everything the auditor needs.
upvoted 0 times
...
Kimberlie
11 months ago
I think option A sounds familiar, but I'm not sure if exporting logs to Cloud Storage is necessary for just reviewing them.
upvoted 0 times
...
Noah
11 months ago
Hmm, I'm a bit unsure about this one. I'll need to review the privacy laws and regulations to determine the right approach.
upvoted 0 times
...
Doug
11 months ago
VLAN configuration and routed configuration are the two most common ways to place a BIG-IP device in a network. The other options are less common or not directly related to the device placement.
upvoted 0 times
...
Kiley
11 months ago
I'm a bit unsure about the VM boot/data volumes. Local SSD or assorted local SSD-backed instances could work, but I'd need to do some more research on the performance and cost tradeoffs.
upvoted 0 times
...

Save Cancel