nerdexam
Google

PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #184

Your company runs an ecommerce business. The application responsible for payment processing has structured JSON logging with the following schema: Capture and access of logs from the payment…

The correct answer is B. Apply a jsonPayload.user_email restricted field to the _Default bucket. Grant the Log Field. By applying a restricted field for jsonPayload.user_email, you can control who has access to this specific piece of information in your logs. Granting the Log Field Accessor role to the security team ensures that only authorized personnel can access the user_email field while…

Submitted by kavita_s· Apr 18, 2026Applying site reliability engineering principles to a service

Question

Your company runs an ecommerce business. The application responsible for payment processing has structured JSON logging with the following schema: Capture and access of logs from the payment processing application is mandatory for operations, but the field contains personally identifiable information (PII). Your jsonPayload.user_email security team does not want the entire engineering team to have access to PII. You need to stop exposing PII to the engineering team and restrict access to security team members only. What should you do?

Options

  • AApply the conditional role binding
  • BApply a jsonPayload.user_email restricted field to the _Default bucket. Grant the Log Field
  • CApply a jsonPayload.user_email exclusion filter to the _Default bucket.
  • DModify the application to toggle inclusion of user_email when the LOG_USER_EMAIL

How the community answered

(32 responses)
  • A
    16% (5)
  • B
    72% (23)
  • C
    3% (1)
  • D
    9% (3)

Explanation

By applying a restricted field for jsonPayload.user_email, you can control who has access to this specific piece of information in your logs. Granting the Log Field Accessor role to the security team ensures that only authorized personnel can access the user_email field while preventing the broader engineering team from

Topics

#Google Cloud Logging#PII Protection#Data Security#IAM

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice