GCP Professional Cloud Security Engineer Practice Question

Access Transparency adds near real-time Cloud Logging entries whenever Google personnel access customer content or configurations. Enabling the feature at the organization level automatically covers every current and future project, including those in the production folder. Because the security team already exports all log types through an aggregated sink, the new Access Transparency entries are forwarded to the existing immutable Cloud Storage bucket without any extra configuration. Access Approval would add an approval workflow that is unnecessary for simply obtaining audit logs, and creating per-project sinks or granting viewers per project would increase administrative effort.