2.1 Determine Database Connectivity and Access Management Considerations PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security auditor requires a record of all SELECT queries run against a Cloud SQL for PostgreSQL instance, including the user and timestamp. What should you enable?

   • AUse Cloud Monitoring to track query metrics.
   • BEnable data access audit logs for the instance.
   • CEnable admin activity audit logs for the instance.
   • DSet the 'log_statement' flag to 'all'.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which SQL statement is used to give a user the ability to SELECT from a specific table in a database?

   • AASSIGN SELECT ON database.table TO user;
   • BALLOW SELECT ON database.table TO user;
   • CGRANT SELECT ON database.table TO user;
   • DPERMIT SELECT ON database.table TO user;
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which command is used to change the password for an existing database user in Cloud SQL for MySQL?

   • ASET PASSWORD
   • BUPDATE USER
   • CALTER USER
   • DMODIFY USER
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A database administrator wants to monitor failed login attempts on a Cloud SQL for PostgreSQL instance. What should they use?

   • AEnable Cloud Audit Logs for the instance.
   • BCreate a database user with a trigger to log failed logins.
   • CEnable the 'log_connections' and 'log_disconnections' database flags.
   • DUse Cloud Monitoring to track connection metrics.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which type of Cloud Audit Logs is disabled by default and must be explicitly enabled to capture data access events?

   • APolicy Denied logs
   • BAdmin Activity logs
   • CSystem Event logs
   • DData Access logs
   Reveal Solution Discussion Select an answer first