Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam Associate Cloud Engineer topic 1 question 27 discussion

Actual exam question from Google's Associate Cloud Engineer
Question #: 27
Topic #: 1
[All Associate Cloud Engineer Questions]

You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?

  • A. Using the GCP Console, filter the Activity log to view the information.
  • B. Using the GCP Console, filter the Stackdriver log to view the information.
  • C. View the bucket in the Storage section of the GCP Console.
  • D. Create a trace in Stackdriver to view the information.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
iamgcp
Highly Voted 3 years, 12 months ago
A is correct. As mentioned in the question, data access logging is enabled. I tried to download a file from a bucket and was able to view this information in Activity tab in console
upvoted 45 times
RegisFTM
2 years, 5 months ago
I did all the configuration enabling data access logging but I still not able to see the logs when uploading or downloading a file. Does someone here has done it with a different result?
upvoted 1 times
...
ryumada
1 year, 9 months ago
I agree with liyux21 and vito9630. In this reference link below says: In the Activity page, where the identity performing logged actions is redacted from the audit log entry, User (anonymized) is displayed. Beacause of this, I think you can't verify the addition of metadata labels through Activity Logs. https://cloud.google.com/logging/docs/audit#view-activity
upvoted 1 times
...
MEHDIGRB
1 year, 7 months ago
activity log is deprecated: https://cloud.google.com/compute/docs/logging/activity-logs
upvoted 3 times
barathgdkrish
1 year, 5 months ago
You need to see here, https://cloud.google.com/compute/docs/logging/audit-logging. Admin activity audit logs.
upvoted 1 times
...
Rog_4444
1 year, 2 months ago
Yes, it is deprecated. However, it became the audit log which is exactly what this question is referring to. Option A is correct in my opinion.
upvoted 2 times
...
...
vito9630
3 years, 11 months ago
data access logging don't provide information about addition of metada, so B is correct
upvoted 23 times
...
...
eliteone11
Highly Voted 3 years, 5 months ago
Answer is A. Activity log does indeed show information about metadata. I agree with Eshkrkrkr based on https://cloud.google.com/storage/docs/audit-logs Admin Activity logs: Entries for operations that modify the configuration or metadata of a project, bucket, or object.
upvoted 14 times
injarapu
2 years, 2 months ago
'Admin activity logs' capture metadata modification, but its different from 'Data Access logging', right ?
upvoted 2 times
...
...
Ash_Win47
Most Recent 3 days, 22 hours ago
B is the correct answer
upvoted 1 times
...
rafcio1990
2 weeks ago
Selected Answer: A
After asking Microsoft Copilot, I got B as a correct answer, but here is what Google Gemini replied: " The best option to verify activities for a particular user with the fewest steps is to: * A. Using the GCP Console, filter the Activity log to view the information. Here's why the other options are less suitable: * B. Stackdriver Logs: While Stackdriver Logs can be used for broader GCP activity logging, Cloud Storage access logs are specifically captured in the Activity log. * C. Viewing the Bucket: This option only shows the current state of the bucket and doesn't provide historical activity information. * D. Stackdriver Trace: Creating a trace is for monitoring service calls and dependencies, not user activity on Cloud Storage buckets. By filtering the Activity log for the specific user and the relevant Cloud Storage buckets, you can efficiently see actions like adding metadata labels and viewing files. "
upvoted 1 times
...
DWT33004
1 month, 2 weeks ago
Selected Answer: B
The correct option to verify activities for a particular user, including the addition of metadata labels and viewed files from Cloud Storage buckets, with the fewest possible steps is: B. Using the GCP Console, filter the Stackdriver log to view the information. Explanation: Stackdriver logging captures logs for various GCP services, including Cloud Storage. By filtering the Stackdriver logs, you can easily view activities such as metadata changes and file accesses for the specified user across multiple buckets. This method allows you to access the relevant information in a centralized manner, minimizing the number of steps required to gather the required insights.
upvoted 1 times
...
sinh
4 months, 1 week ago
Selected Answer: B
https://cloud.google.com/logging/docs/audit#view-logs
upvoted 1 times
...
randomajah
6 months, 3 weeks ago
Selected Answer: A
A is Correct
upvoted 1 times
...
YourCloudGuru
7 months, 3 weeks ago
Selected Answer: A
The correct answer is A. Steps: 1 Go to the GCP Console 2 Click on the Hamburger menu in the top left corner of the page 3 Click on Logging 4 Click on the Activity log tab 5 Click on the Filter button 6 In the Resource field, enter the names of the three Cloud Storage buckets 7 In the User field, enter the name of the user whose activities you want to verify 8 Click on the Apply button The Activity log will display all of the activities that have been performed on the three Cloud Storage buckets by the specified user. You can then review the log to identify the addition of metadata labels and which files have been viewed. The other options are not as efficient B because it requires you to create a trace in Stackdriver. This can be time-consuming and error-prone C&D because it does not allow you to filter the results by user or resource
upvoted 4 times
...
HemrajLodhi
7 months, 3 weeks ago
A is correct, the activity log has metadata info as well
upvoted 1 times
...
YomanB
8 months, 3 weeks ago
The best approach among the given options is to use Option B: Using the GCP Console, filter the Stackdriver log to view the information. This approach would allow you to efficiently filter and analyze the logs related to the Cloud Storage buckets to verify the desired user activities.
upvoted 1 times
...
axantroff
8 months, 4 weeks ago
I think it's all about Data Access audit logs, you check it - https://cloud.google.com/storage/docs/audit-logging
upvoted 1 times
...
Nxt_007
9 months, 2 weeks ago
Selected Answer: B
Option B is Correct By filtering the Stackdriver logs in the GCP Console, you can easily track and verify activities related to the addition of metadata labels and viewed files for the specified user across the three Cloud Storage buckets. Option A (filtering the Activity log) is not as appropriate because the Stackdriver log provides more detailed and comprehensive logging and monitoring capabilities.
upvoted 1 times
...
Neha_Pallavi
10 months ago
Option A suggests filtering the Activity log, but the Activity log only shows user activity within a GCP project, not across projects or resources. In this case, the buckets are likely in different projects or locations, so the Activity log may not show all the relevant activity. So B Is correct
upvoted 1 times
...
Neha_Pallavi
10 months ago
Using the GCP Console, Filter the activity log to view the information
upvoted 1 times
...
ExamsFR
10 months ago
Selected Answer: A
A is correct
upvoted 2 times
...
SHERLOCK2213
12 months ago
Selected Answer: A
A is the answer
upvoted 3 times
...
Vamshi_Krishna
1 year ago
B is Correct. Using the GCP Console, filter the Stackdriver log to view the information. Stackdriver Logging provides an audit trail of the user activity for Cloud Storage. It is a centralized service to search, analyze, and alert on logs generated from GCP services. You can filter the logs to get the details for a particular user and search for specific activity such as metadata updates or file views. Option A suggests filtering the Activity log, but the Activity log only shows user activity within a GCP project, not across projects or resources. In this case, the buckets are likely in different projects or locations, so the Activity log may not show all the relevant activity.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...