You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

The correct answer is A. Add the auditors group to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.. As per google best practices it is recommended to use predefined roles and create groups to control access to multiple users with same responsibility. https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#groups-and- service-accounts .

Submitted by andres_qro· Mar 30, 2026Configuring access and security

Question

You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

Options

AAdd the auditors group to the logging.viewer' and bigQuery.dataViewer' predefined IAM roles.
BAdd the auditors group to two new custom IAM roles.
CAdd the auditor user accounts to the logging.viewer' and bigQuery.dataViewer' predefined IAM
DAdd the auditor user accounts to two new custom IAM roles.

How the community answered

(51 responses)

A
80% (41)
B
10% (5)
C
6% (3)
D
4% (2)

Explanation

As per google best practices it is recommended to use predefined roles and create groups to control access to multiple users with same responsibility. https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#groups-and- service-accounts .

Topics

#IAM audit logging#BigQuery#predefined roles#group-based access

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice