GCP Associate Cloud Engineer Practice Question

Admin Activity audit logs capture all write operations that modify resources or IAM policies and are always enabled-you cannot turn them off. System Event logs are also always on because they record critical Google-initiated actions. Policy Denied logs, which show failed permission checks, are likewise mandatory. Data Access audit logs record read-only API calls; they are disabled by default for most services, can be selectively turned off, and incur logging ingestion charges when enabled. Therefore, disabling Data Access logs will reduce costs while still preserving the required change and system event records.