Google Cloud Certified - Associate Cloud Engineer Associate-Cloud-Engineer Question # 63 Topic 7 Discussion

Google Cloud Certified - Associate Cloud Engineer Associate-Cloud-Engineer Question # 63 Topic 7 Discussion

Associate-Cloud-Engineer Exam Topic 7 Question 63 Discussion:
Question #: 63
Topic #: 7

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?


A.

Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.


B.

Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.


C.

Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.listpermission. Perform the export of logs to Cloud Storage.


D.

Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.listpermission. Direct the auditor to also review the logs for changes to Cloud IAM policy.


Get Premium Associate-Cloud-Engineer Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.