Cloud Digital Leader Google Cloud Security Practice Question
A security administrator needs to ensure that Google personnel do not access customer data without explicit authorization. Which service should they use to get logs of Google employee access?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access Transparency
Access Transparency provides logs of Google personnel actions on customer data. Cloud Audit Logs track user activities within the customer's project. Assured Workloads is for regulatory compliance. Security Command Center is for threat detection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Access Transparency
Why this is correct
Access Transparency is the correct control because it provides near real-time, read-only audit logs specifically for actions taken by Google personnel against customer data. These logs capture each instance of access (e.g., when a Google engineer troubleshoots a support issue) and are viewable in Cloud Logging. Unlike standard audit logs, Access Transparency is designed solely for visibility into Google's own staff activity, making it the exact mechanism for this requirement.
- ✗
Cloud Audit Logs
Why it's wrong here
Cloud Audit Logs are wrong because they record administrative and data-access operations performed by principals within your own Google Cloud project, such as users, service accounts, and groups. They do not capture actions by Google employees, because Google personnel are not identity principals in your project; their access is governed by Google's own internal infrastructure. Therefore, Cloud Audit Logs cannot satisfy a requirement to log Google personnel access.
- ✗
Security Command Center
Why it's wrong here
Security Command Center (SCC) is a security and risk management platform that collects and correlates findings about misconfigurations, vulnerabilities, and threats across your cloud environment. It does not generate raw audit logs of personnel access; instead, it ingests findings from services like Cloud Audit Logs and Access Transparency for threat detection and compliance dashboards. SCC might display access-related findings, but it is not the logging service itself.
- ✗
Assured Workloads
Why it's wrong here
Assured Workloads is a compliance-oriented service that helps you enforce regulatory controls such as data residency, boundary conditions, and access approval policies on a dedicated infrastructure; it does not directly produce logs of Google personnel actions. Even when an Assured Workloads folder enables Access Approval/Transparency integrations, the actual logging they seek is performed by Access Transparency, not by Assured Workloads itself. Thus, it may support the governance framework but is not the logging mechanism.
Go deeper
Related to this question
Learn chapter
Cloud Digital Transformation
Key term
Security Command Center
Security Command Center is a centralized cloud security management platform that helps organizations detect, investigate, and respond to threats across their cloud infrastructure.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
Courseiva writes every GCDL question from scratch — 829 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.