Google Cloud Digital LeaderSecurity and operations with Google CloudMedium
A global software company maintains critical internal applications on Google Cloud. They need to track all administrative activities and data access attempts across their projects for security auditing and compliance purposes. This includes who performed what action, where, and when. Which Google Cloud service automatically records these events?
- ACloud Logging
- BCloud Trace
- CCloud Audit Logs
- DCloud Monitoring
Show answer & explanationAnswer & explanation
Correct answer: C. Cloud Audit Logs
Cloud Audit Logs automatically record administrative activities, data access, and system events across Google Cloud services, providing a clear trail for security auditing and compliance.
Why the other options are wrong
- A. Cloud Logging aggregates all types of logs, but Cloud Audit Logs is the specific category within Logging that captures audit-related events.
- B. Cloud Trace tracks request latency and propagation through distributed systems, not security audit events.
- D. Cloud Monitoring collects metrics and metadata for performance and health, not specific administrative or data access activities.
Cloud Audit Logs
Cloud Audit Logs records administrative activities, data access events, and system events across Google Cloud services, providing an immutable audit trail.
- Automatically generated for most Google Cloud services.
- Records 'who, what, where, and when' for resource access.
- Crucial for security, compliance, and troubleshooting.
- Categorized into Admin Activity, Data Access, and System Event logs.
Memory trick: Audit Logs are the security camera footage of your cloud actions.