You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with t

The correct answer is D. Enable Data Access audit logs for the Cloud Storage API.. Data Access logs pertaining to Cloud Storage operations are not recorded by default. You have https://cloud.google.com/storage/docs/audit-logging

Submitted by klara.se· Mar 30, 2026Configuring access and security

Question

You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?

Options

AEnable the Identity Aware Proxy API on the project.
BScan the bucker using the Data Loss Prevention API.
CAllow only a single Service Account access to read the data.
DEnable Data Access audit logs for the Cloud Storage API.

How the community answered

(18 responses)

C
6% (1)
D
94% (17)

Explanation

Data Access logs pertaining to Cloud Storage operations are not recorded by default. You have https://cloud.google.com/storage/docs/audit-logging

Topics

#Cloud Audit Logs#Data Access logging#Cloud Storage#compliance

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice