Discovering and Storing Sensitive Data GCLD Practice Questions (Page 11)

Questions 51–51

1. 51application · medium

   A company has a cloud storage bucket containing sensitive customer data. The security team wants to ensure that only the data engineering team can access the bucket, and that any access is logged for audit. The data engineering team uses a cloud identity provider. What should the security team configure?

   • AGrant the data engineering team's identity group read and write permissions on the bucket and enable audit logging for the bucket.
   • BGrant all employees in the company read access to the bucket and enable logging only for write operations.
   • CCreate a shared access key and distribute it to the data engineering team, with logging enabled for the storage account.
   • DMake the bucket public and rely on the cloud provider's monitoring to detect unauthorized access.
   Reveal Solution Discussion Select an answer first