Question 650
A storage team sees successful administrative logins but cannot show which principal accessed protected data objects during an investigation. Which limitation must be considered before claiming the issue is fully resolved?
Explanation
Correct Answer
Data-access logging can have cost and privacy implications and must be scoped. This caution prevents extrapolating beyond the specific evidence or product boundary. Observability configuration should reflect the security question requiring evidence. The unresolved point should be tested using Cloud Audit Logs data access categories, bucket access records and retention settings rather than assuming a working interface proves full compliance or resilience.
Incorrect Answers
Application availability metrics are sufficient to reconstruct confidential file access. This limitation is framed as a blanket exception, but the case requires a different, narrower caution. The relevant boundary is that data-access logging can have cost and privacy implications and must be scoped. Observability configuration should reflect the security question requiring evidence. Inspect Cloud Audit Logs data access categories, bucket access records and retention settings.
All Cloud Audit Logs classes have identical default enablement and cost. The proposed claim mistakes an incomplete signal or product feature for a universal guarantee. The relevant boundary is that data-access logging can have cost and privacy implications and must be scoped. Observability configuration should reflect the security question requiring evidence. Inspect Cloud Audit Logs data access categories, bucket access records and retention settings.
Encryption at rest independently records who accessed protected objects. This claim exceeds the evidence and ignores an important risk or operational dependency. The relevant boundary is that data-access logging can have cost and privacy implications and must be scoped. Observability configuration should reflect the security question requiring evidence. Inspect Cloud Audit Logs data access categories, bucket access records and retention settings.