Google Cloud Digital LeaderSecurity and operations with Google CloudMedium
A global software company maintains critical internal applications on Google Cloud. They need to ensure that all administrative activities and data access events across their projects are logged, immutable, and retained for several years to meet audit and compliance requirements. Which Google Cloud operations product provides this comprehensive auditing capability?
- ACloud Monitoring
- BCloud Trace
- CCloud Audit Logs
- DCloud Logging
Show answer & explanationAnswer & explanation
Correct answer: C. Cloud Audit Logs
Cloud Audit Logs automatically records administrative activities (Admin Activity logs), data access (Data Access logs), and system events (System Event logs) across Google Cloud services. These logs are immutable and can be configured for long-term retention to meet audit and compliance requirements.
Why the other options are wrong
- A. Cloud Monitoring focuses on metrics and alerts, not detailed audit trails of activities.
- B. Cloud Trace analyzes request latency, not administrative or data access auditing.
- D. Cloud Logging is a general-purpose log management service, but Cloud Audit Logs specifically refers to the immutable audit trails required for compliance.
Cloud Audit Logs
Cloud Audit Logs maintains immutable audit trails of administrative activities and data access events across Google Cloud services, essential for security and compliance.
- Records Admin Activity, Data Access, and System Event logs.
- Logs are immutable and verifiable.
- Integrates with Cloud Logging for storage and querying, but is a distinct category of logs.
Memory trick: Audit Logs Ensure Compliance and Traceability.