GCP Associate Cloud Engineer Practice Question

The Logging Viewer predefined role (roles/logging.viewer) provides read-only access to Cloud Logging entries and metadata for the entire project. It does not include permissions to access data stored in other services such as Cloud Storage or BigQuery, nor does it allow configuration changes. The basic Viewer role would allow the auditor to read data in many other services, making it overly permissive. Logging Admin adds write and configuration permissions that are not required. Creating a custom role is unnecessary because an appropriate predefined role already exists and is automatically kept up to date by Google.