🔥 40% Off Crucial Exams Memberships — Deal ends today!

1 hour, 26 minutes remaining!
Crucial Exams

GCP Professional Cloud Security Engineer Practice Question

Your organization aggregates all VPC Flow Logs and firewall rule logs from every project into a centralized log bucket called "net-sec-logs" that is hosted in the security project. A third-party network-operations contractor needs temporary, read-only access so they can investigate network performance issues. However, for compliance reasons the contractor must not be able to view any Cloud Audit Data Access logs or other private log entries that might also be stored in the same bucket in the future. Which single IAM role should you grant on the log bucket to meet both requirements while following the principle of least privilege?

  • Grant roles/logging.viewer on the "net-sec-logs" bucket.

  • Grant roles/logging.admin on the "net-sec-logs" bucket.

  • Grant both roles/logging.viewer and roles/logging.privateLogViewer on the "net-sec-logs" bucket.

  • Grant roles/logging.privateLogViewer on the "net-sec-logs" bucket.

GCP Professional Cloud Security Engineer
Managing operations
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot