ExpertMedium1 markMultiple Choice
GCP ACE · Question 49 · Domain 5.3: Viewing audit logs
You want to view the Admin Activity audit logs for your project to see recent changes to IAM policies.
Where in the Google Cloud Console should you go to view these logs?
You want to view the Admin Activity audit logs for your project to see recent changes to IAM policies.
Where in the Google Cloud Console should you go to view these logs?
Answer options:
A.
IAM & Admin > Audit Logs
B.
Security > Security Command Center
C.
Cloud Logging > Logs Explorer
D.
Compute Engine > VM instances
How to approach this question
Identify the central service in GCP where all logs (including audit logs) are stored and queried.
Full Answer
C.Cloud Logging > Logs Explorer✓ Correct
Cloud Logging > Logs Explorer
In Google Cloud, all Cloud Audit Logs (Admin Activity, Data Access, System Event, etc.) are sent to Cloud Logging. To view, query, and analyze these logs, you use the Logs Explorer within the Cloud Logging interface. You can write queries to filter specifically for `logName="projects/[PROJECT_ID]/logs/cloudaudit.googleapis.com%2Factivity"` to see Admin Activity logs. The 'IAM & Admin > Audit Logs' page is only for configuring Data Access log settings, not viewing them.
Common mistakes
Going to 'IAM & Admin > Audit Logs' expecting to see the logs, when that page is actually just for configuration.
Practice the full GCP Associate Cloud Engineer Practice Exam 6
50 questions · hints · full answers · grading
More questions from this exam
Q01What is the primary purpose of a Google Cloud project?EasyQ02Your development team needs to manage Compute Engine instances in a specific project. They need t...MediumQ03You are automating the setup of a new Google Cloud project using a bash script. You need to enabl...EasyQ04Your startup has a strict monthly cloud budget of $500. You want to be notified immediately if yo...MediumQ05Your finance team wants to perform granular analysis of your Google Cloud spending using SQL. The...Hard