Answer-first summary for fast verification
Answer: View Data Access audit logs in Cloud Logging. Search for the user's email as the principal.
The correct answer is C. View Data Access audit logs in Cloud Logging. Search for the user's email as the principal. Data Access audit logs provide detailed information about accesses to your Google Cloud resources. By searching for the terminated employee's email address as the principal in the Data Access audit logs, you can track their access to sensitive customer information after their termination. This approach allows you to specifically focus on data access, which is crucial for identifying any unauthorized or suspicious activities related to customer data.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Upon the termination of an employee, there was an oversight which led to their access to Google Cloud not being removed until two weeks after their departure. You are now tasked with investigating whether this employee accessed any sensitive customer information during the period after their termination.
What steps should you take to identify and confirm if the terminated employee accessed any sensitive customer data after their official termination date?
A
View System Event Logs in Cloud Logging. Search for the user's email as the principal.
B
View System Event Logs in Cloud Logging. Search for the service account associated with the user.
C
View Data Access audit logs in Cloud Logging. Search for the user's email as the principal.
D
View the Admin Activity log in Cloud Logging. Search for the service account associated with the user.
No comments yet.