Exam Professional Cloud Security Engineer topic 1 question 138 discussion

answer D Data Access audit logs contain API calls that read the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data.

https://cloud.google.com/logging/docs/audit/gsuite-audit-logging#log-types Data Access audit logs contain API calls that **read** the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data. Admin Activity audit logs contain log entries for API calls or other actions that **modify** the configuration or metadata of resources

Its A Admin Activity audit logs contain log entries for API calls or other actions that modify the configuration or metadata of resources. For example, these logs record when users create VM instances or change Identity and Access Management permissions. Admin Activity audit logs are always written; you can't configure, exclude, or disable them. Even if you disable the Cloud Logging API, Admin Activity audit logs are still generated.

D. Data Access

D. https://cloud.google.com/logging/docs/audit/#data-access "Data Access audit logs contain API calls that read the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data."

Should be D https://cloud.google.com/logging/docs/audit/#data-access