nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #124

You are a security engineer at a finance company. Your organization plans to store data on Google Cloud, but your leadership team is worried about the security of their highly sensitive data…

The correct answer is D. Enable Access Transparency logs with Access Approval requests for Google employees. https://cloud.google.com/access-transparency Explicitly approve access to your data or configurations on Google Cloud. Access Approval requests, when combined with Access Transparency logs, can be used to audit an end-to-end chain from support ticket to access request to…

Submitted by suresh_in· Apr 18, 2026Ensuring data protection

Question

You are a security engineer at a finance company. Your organization plans to store data on Google Cloud, but your leadership team is worried about the security of their highly sensitive data. Specifically, your company is concerned about internal Google employees' ability to access your company's data on Google Cloud. What solution should you propose?

Options

  • AUse customer-managed encryption keys.
  • BUse Google's Identity and Access Management (IAM) service to manage access controls on
  • CEnable Admin activity logs to monitor access to resources.
  • DEnable Access Transparency logs with Access Approval requests for Google employees.

How the community answered

(55 responses)
  • A
    7% (4)
  • B
    13% (7)
  • C
    4% (2)
  • D
    76% (42)

Explanation

https://cloud.google.com/access-transparency Explicitly approve access to your data or configurations on Google Cloud. Access Approval requests, when combined with Access Transparency logs, can be used to audit an end-to-end chain from support ticket to access request to approval, to eventual access.

Topics

#Access Transparency#Access Approval#Data Protection#Google Internal Access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice