nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #39

Auditors visit your teams every 12 months and ask to review all the Google Cloud Identity and Access Management (Cloud IAM) policy changes in the previous 12 months. You want to streamline and…

The correct answer is B. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared. https://cloud.google.com/iam/docs/roles-audit-logging#scenario_external_auditors

Submitted by carlos_mx· Mar 30, 2026Designing for security and compliance

Question

Auditors visit your teams every 12 months and ask to review all the Google Cloud Identity and Access Management (Cloud IAM) policy changes in the previous 12 months. You want to streamline and expedite the analysis and audit process. What should you do?

Options

  • ACreate custom Google Stackdriver alerts and send them to the auditor.
  • BEnable Logging export to Google BigQuery and use ACLs and views to scope the data shared
  • CUse cloud functions to transfer log entries to Google Cloud SQL and use ACLS and views to limit
  • DEnable Google Cloud Storage (GCS) log export to audit logs Into a GCS bucket and delegate

How the community answered

(36 responses)
  • A
    17% (6)
  • B
    69% (25)
  • C
    6% (2)
  • D
    8% (3)

Explanation

https://cloud.google.com/iam/docs/roles-audit-logging#scenario_external_auditors

Topics

#Cloud Audit Logs#BigQuery log export#IAM policy#compliance auditing

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice