Audit logging in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is audit logging in Google Cloud Platform (GCP)?

Audit logging in GCP records who did what, where, and when in your cloud environment. It helps track user actions and system events for security and compliance.

beginner

Name the three types of audit logs in GCP.

The three types are: Admin Activity logs (record management actions), Data Access logs (record data read/write), and System Event logs (record system operations).

intermediate

How do you enable Data Access audit logs in GCP?

Data Access logs are disabled by default. You enable them by configuring the audit log settings in the IAM & Admin section for the specific service or project.

beginner

Where are GCP audit logs stored and how can you view them?

Audit logs are stored in Cloud Logging. You can view them in the Logs Explorer in the Google Cloud Console or export them to BigQuery, Cloud Storage, or Pub/Sub.

beginner

Why is audit logging important for security and compliance?

Audit logging helps detect unauthorized access, investigate incidents, and prove compliance with regulations by providing a clear record of all actions in your cloud environment.

Which type of audit log records management actions in GCP?

A Error logs

B Admin Activity logs

C System Event logs

D Data Access logs

Admin Activity logs record management or administrative actions performed on resources.

Where can you view audit logs in GCP?

A Cloud Shell terminal

B Cloud Storage browser

C Cloud Functions dashboard

D Cloud Logging Logs Explorer

Audit logs are viewed in Cloud Logging using the Logs Explorer.

By default, which audit logs are enabled in GCP?

A Admin Activity logs

B Data Access logs

C System Event logs

D All audit logs

Admin Activity logs are enabled by default; Data Access logs and System Event logs are disabled by default.

What is a common use of audit logs in cloud security?

A Increase storage capacity

B Improve network speed

C Detect unauthorized access

D Deploy new services

Audit logs help detect unauthorized access by recording user actions.

Which service can audit logs be exported to for advanced analysis?

A BigQuery

B Cloud Run

C Cloud DNS

D Cloud Build

Audit logs can be exported to BigQuery for detailed querying and analysis.

Explain what audit logging is in GCP and why it is important.

Think about how keeping a record of actions helps protect your cloud resources.

Describe the three types of audit logs in GCP and what each records.

Consider management actions, data operations, and system events separately.