Exam Associate Cloud Engineer topic 1 question 27 discussion

A is correct. As mentioned in the question, data access logging is enabled. I tried to download a file from a bucket and was able to view this information in Activity tab in console

Answer is A. Activity log does indeed show information about metadata. I agree with Eshkrkrkr based on https://cloud.google.com/storage/docs/audit-logs Admin Activity logs: Entries for operations that modify the configuration or metadata of a project, bucket, or object.

Correct answer is "B" Cause they asked for metadata too on the question.

A is the correct answer.

Stackdriver (Cloud logging) contains both admin activity logs and data access logs.

Option B is the correct Answer

The correct answer is A. Using the GCP Console, filter the Activity log to view the information. Data access logs for Cloud Storage buckets are not stored in Stackdriver Logging (formerly Stackdriver). They are stored in the Activity Log, a centralized log for all GCP activity. The Activity Log allows filtering by resource (the specific buckets), user, and activity type (adding metadata labels, viewing files). Options B, C, and D won't show this detailed access information. Therefore, directly querying the Activity Log provides the most efficient and accurate way to find the required information.

Cloud Audit Logs (Activity Logs):These logs track who did what, where, and when within Google Cloud resources, which is crucial for security and compliance.

B is incorrect because data access logs can be viewed from Activity logs and not Stackdriver logs. Filtering the logs in Stackdriver logging may provide some information, but it may not be as specific and targeted as viewing the Audit log in the GCP console. Stackdriver logging is a more general log management and analysis tool, whereas the Audit log is specifically designed for tracking and monitoring activities in Google Cloud services.

Apparently Stackdriver logging is depreciated and new is Cloud logging as per below answer I got from ChatGPI : Filter the logs in Cloud Logging (formerly Stackdriver Logging) for that specific user and the bucket resources.

Using the GCP Console, filter the Activity log to view the information. This is because Google Cloud Platform’s Activity log is specifically designed to record and store actions performed by users, such as the addition of metadata labels and file access in Cloud Storage buckets. Filtering the Activity log by the specific user will help you quickly verify the actions they have taken, fulfilling the requirement with the fewest possible steps.

Los registros de acceso a los datos para Cloud Storage se almacenan en Cloud Logging (anteriormente Stackdriver Logging). Para verificar actividades específicas, como la adición de etiquetas de metadatos y el acceso a archivos en depósitos, debes filtrar los registros en Cloud Logging. Esto te permitirá ver las acciones realizadas por un usuario en particular de forma detallada. A es incorrecta, ya que la consola de actividad solo muestra actividades administrativas y no incluye los registros de acceso a los datos. C no te permite ver un historial de actividades o registros de acceso. D es innecesario, ya que puedes acceder directamente a los registros en Cloud Logging sin necesidad de crear un seguimiento adicional.

B. Using the GCP Console, filter the Stackdriver log to view the information. Here's why: Data Access Logging: Data access logging captures information about actions performed on Cloud Storage buckets, including metadata changes and file views. Stackdriver Logging: This service collects and stores logs from various Google Cloud services, including Cloud Storage data access logs. Filtering: You can use Stackdriver Logging's filtering capabilities to narrow down the logs to the specific user and activities you're interested in (adding metadata labels and viewing files). This approach provides a direct and efficient way to verify the desired information without requiring additional steps or tools.

Stackdriver now known as Cloud Logging captures detailed logs for various GCP services, including Cloud Storage. Since you've enabled data access logging, the logs should contain records of actions such as viewing files, modifying metadata, and other access activities. This method is more comprehensive than the Activity log (which primarily tracks high-level operations) and gives you the ability to drill down into specific events, which is necessary for sensitive data verification.

Addition of metadata labels.

Activity Log Usage: Useful for auditing and tracking changes made by users or service accounts to the GCP resources. Stackdriver Log Usage: Useful for monitoring the behavior of applications, diagnosing issues, and understanding the operational state of your system

Answer is B. Explanation: Activity Logs are essential for tracking administrative and system actions for security and compliance, while Cloud Logging (formerly known as Stackdriver Logging) offers a comprehensive solution for collecting, analyzing, and monitoring a wide range of logs from various sources. Also, the addition of metadata labels can be verified in Cloud Logging only.