ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 117 - Associate Cloud Engineer discussion

Report
Export

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

A.
View System Event Logs in Stackdriver. Search for the user's email as the principal.
Answers
A.
View System Event Logs in Stackdriver. Search for the user's email as the principal.
B.
View System Event Logs in Stackdriver. Search for the service account associated with the user.
Answers
B.
View System Event Logs in Stackdriver. Search for the service account associated with the user.
C.
View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
Answers
C.
View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
D.
View the Admin Activity log in Stackdriver. Search for the service account associated with the user.
Answers
D.
View the Admin Activity log in Stackdriver. Search for the service account associated with the user.
Suggested answer: C

Explanation:

https://cloud.google.com/logging/docs/audit

Data Access audit logs Data Access audit logs contain API calls that read the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data.

https://cloud.google.com/logging/docs/audit#data-access

asked 18/09/2024
Reaper Gamer
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first