Google Cloud Professional Cloud Architect PCA — Topic 1 Question 216

Question

You are designing a new insurance claims processing application that will be deployed on Google Kubernetes Engine (GKE) Your company’s compliance team requires a complete and non-repudiable audit trail for all administrative actions from day one. Your application must capture who deploys a new container image, who modifies the GKE cluster's configuration, and who interacts with running pods or Kubernetes secrets using kubectl. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Enable GKE Audit Logging to send Kubernetes API server logs to Cloud Logging, and ensure Cloud Audit Logs are enabled for the project. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Cloud Audit Logs record administrative and data-access activity for auditing and governance. Cloud Logging centralizes, stores, and analyzes logs across services.

Google Cloud Professional Cloud Architect PCA — Question 216