Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 298

Question

A security audit uncovered several inconsistencies in your project's Identity and Access Management (IAM) configuration. Some service accounts have overly permissive roles, and a few external collaborators have more access than necessary. You need to gain detailed visibility into changes to IAM policies, user activity, service account behavior, and access to sensitive projects. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Use Cloud Audit Logs. Create log export sinks to send these logs to a security information and event management (SIEM) solution for correlation with other event sources. Cloud Audit Logs record administrative and data-access activity for auditing and governance.

Google Cloud Professional Cloud Security Engineer PCSE — Question 298