Data access logs in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What are Data Access Logs in Google Cloud Platform?

Data Access Logs record who accessed your data and what actions they performed. They help track and audit data usage for security and compliance.

beginner

Which Google Cloud service stores Data Access Logs?

Cloud Audit Logs stores Data Access Logs, capturing API calls that read or modify data in your Google Cloud resources.

intermediate

How do Data Access Logs differ from Admin Activity Logs?

Admin Activity Logs record changes to configuration or metadata, while Data Access Logs record read or write actions on the actual data.

intermediate

Why should you enable Data Access Logs only when needed?

Because Data Access Logs can generate a large volume of logs, increasing storage costs and complexity. Enable them selectively for important resources.

beginner

Name two ways to view Data Access Logs in GCP.

You can view Data Access Logs in the Cloud Logging console or export them to BigQuery for detailed analysis.

What type of actions do Data Access Logs record in GCP?

A Reading or modifying data

B Changing resource configurations

C Billing transactions

D Network traffic

Data Access Logs capture actions that read or modify data, unlike Admin Activity Logs which track configuration changes.

Where are Data Access Logs stored in Google Cloud?

A Cloud Functions

B Cloud Storage buckets

C Cloud Audit Logs

D Cloud SQL

Cloud Audit Logs is the service that stores Data Access Logs in GCP.

Why might enabling Data Access Logs increase costs?

A They require additional compute resources

B They generate many log entries increasing storage and processing costs

C They slow down network traffic

D They increase API call charges

Data Access Logs can produce a large volume of logs, which increases storage and analysis costs.

Which of these is NOT a use of Data Access Logs?

A Auditing who accessed data

B Tracking data read and write operations

C Supporting compliance requirements

D Monitoring configuration changes

Monitoring configuration changes is done by Admin Activity Logs, not Data Access Logs.

How can you analyze Data Access Logs beyond the Cloud Logging console?

A Export logs to BigQuery for querying

B Send logs to Cloud DNS

C Store logs in Cloud Spanner

D Use Cloud Run to process logs

Exporting logs to BigQuery allows detailed querying and analysis of Data Access Logs.

Explain what Data Access Logs are and why they are important in Google Cloud.

Think about who accessed data and what they did.

Describe best practices for enabling and managing Data Access Logs in GCP.

Consider cost and volume of logs.