PDE Question 16

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  First step is a general diagnostic.

• Chose A2

  Stackdriver Audit Logs is now called Cloud Audit logs. To secure a data warehouse, the first step is to understand how the datasets are being accessed and used. Cloud Audit logs can track data access as it provides a detailed log of all data access operations.

• 3

  A is correct because this is the best way to get granular access to data showing which users are accessing which data. B is not correct because we already know that all users already have access to all data, so this information is unlikely to be useful. It will also not show what users have done, just what they can do. C is not correct because slot usage will not inform security policy. D is not correct because a billing account is typically shared among many people and will only show the amount of data queried and stored https://cloud.google.com/bigquery/docs/reference/auditlogs/#mapping-audit-entries-to-log-streams https://cloud.google.com/bigquery/docs/monitoring#slots-available