GCP Cloud Digital Leader Practice Question

Auditing is the practice of recording and reviewing activity that has already occurred so you can verify that security controls are working and investigate incidents. Enabling Cloud Audit Logs to capture every change to IAM policies is an example of auditing because it produces an immutable record of who did what, when, and on which resource. Enforcing 2-step verification pertains to authentication, since it verifies user identity at sign-in. Granting the BigQuery Data Viewer role is authorization, as it controls what a principal can do after identity is verified. Configuring VPC Service Controls defines network-level boundaries to prevent data exfiltration but is not an auditing activity.