Applications often require access to "secrets" -small pieces of sensitive data at build or run time. The administrator managing these secrets on GCP wants to keep a track of "who did what, where…

The correct answer is A. Admin Activity logs C. Data Access logs. Cloud Audit Logs in GCP provide two key streams for tracking 'who did what, where, and when': (1) Admin Activity logs record API calls that modify resource configurations or metadata - for example, creating or accessing a secret manager entry. These are always on and cannot be…

Submitted by alyssa_d· Apr 18, 2026Ensuring data protection

Question

Applications often require access to "secrets" -small pieces of sensitive data at build or run time. The administrator managing these secrets on GCP wants to keep a track of "who did what, where, and when?" within their GCP projects. Which two log streams would provide the information that the administrator is looking for? (Choose two.)

Options

AAdmin Activity logs
BSystem Event logs
CData Access logs
DVPC Flow logs
EAgent logs

How the community answered

(28 responses)

A
89% (25)
D
7% (2)
E
4% (1)

Explanation

Cloud Audit Logs in GCP provide two key streams for tracking 'who did what, where, and when': (1) Admin Activity logs record API calls that modify resource configurations or metadata - for example, creating or accessing a secret manager entry. These are always on and cannot be disabled. (2) Data Access logs record API calls that read resource configurations or user-provided data, such as reading a secret's value. Together they form a complete audit trail. System Event logs (B) record GCP system-level actions, not user actions. VPC Flow logs (D) capture network traffic metadata. Agent logs (E) are VM-level operational logs - none of these provide the identity-focused audit trail required.

Topics

#Secrets Management#Auditing#Cloud Logging#Data Protection

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice