4.2 Configuring Logging, Monitoring, and Detection PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A security team detects a potential data breach involving a Cloud Storage bucket. The team needs to determine the scope of the breach, including which objects were accessed and by whom. Which combination of logs should they analyze?

   • AAdmin Activity audit logs and Cloud IDS findings
   • BVPC flow logs and Cloud IDS findings
   • CData Access audit logs and VPC flow logs
   • DCloud NGFW logs and Packet Mirroring
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which IAM role provides read-only access to view logs in Cloud Logging?

   • Aroles/logging.configWriter
   • Broles/logging.admin
   • Croles/logging.viewer
   • Droles/logging.privateLogViewer
   Reveal Solution Discussion Select an answer first