Answer-first summary for fast verification
Answer: Store the data in a BigQuery dataset restricted to authorized personnel only, utilizing Data Access logs for audit purposes.
For data requiring strict compliance with government regulations and auditable access records, **BigQuery Dataset (Option B)** stands out as the optimal choice, especially for structured data needing frequent queries. It offers detailed audit trails via Data Access logs and precise access control. **Cloud Storage with Customer-Supplied Encryption Keys (Option A)** is viable for unstructured data but demands meticulous key management. Options involving **Cloud SQL (Option C)** and **AppEngine (Option D)** introduce scalability issues or additional complexity, making them less favorable.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
What is the best practice for storing data that must comply with government regulations requiring an auditable access record, ensuring all logs are properly archived?
A
Encrypt the data on Cloud Storage using customer-supplied encryption keys, assigning a unique decryption key to each authorized user.
B
Store the data in a BigQuery dataset restricted to authorized personnel only, utilizing Data Access logs for audit purposes.
C
Keep the data in Cloud SQL, assigning distinct database usernames to each user, and rely on Cloud SQL Admin activity logs for auditing.
D
Place the data in a Cloud Storage bucket accessible solely through an AppEngine service that logs access before granting bucket links.
No comments yet.