Google PCA Practice Question: Managing Implementation and Ensuring Solution and Operations Reliability
Your organization requires that all production changes to Google Cloud resources be auditable and that you can identify who made a change and when. You need to configure logging to meet this requirement. What should you do?
⚠ Common exam trap
Many exam-takers confuse Data Access audit logs with Admin Activity audit logs; the former are for data reads/writes and are not enabled by default.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Admin Activity audit logs, which are enabled by default, and export them to a centralized logging project or Cloud Storage bucket with retention policies.
Admin Activity audit logs are enabled by default and record administrative changes, including the identity of the caller and the timestamp. Exporting these logs to a centralized project or Cloud Storage with retention policies ensures they are preserved for auditing. This satisfies the requirement to audit production changes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable Admin Activity audit logs, which are enabled by default, and export them to a centralized logging project or Cloud Storage bucket with retention policies.
Why this is correct
Admin Activity audit logs record administrative changes to resources and are enabled by default. They include information about who made the change, what was changed, and when. Exporting them to a centralized location ensures long-term retention and auditability. This meets the requirement to identify who made a change and when.
- ✗
Configure VPC Flow Logs to capture network traffic and analyze it for unauthorized changes.
Why it's wrong here
VPC Flow Logs capture network flow information, not resource changes. They are useful for network monitoring and security analysis but do not record administrative actions. They cannot identify who made a configuration change or when. This does not meet the auditability requirement.
- ✗
Enable Data Access audit logs for all services and export them to Cloud Storage for long-term retention.
Why it's wrong here
Data Access audit logs record read and write operations on data, but they are not enabled by default and can generate high volumes. While they provide detailed access information, they are not the primary logs for administrative changes. Admin Activity audit logs are more relevant for tracking resource modifications. Exporting to Cloud Storage alone does not ensure auditability without proper log configuration.
- ✗
Use Cloud Monitoring to create alerting policies for resource changes and send notifications to a team email.
Why it's wrong here
Cloud Monitoring alerts are for notifying about conditions, not for auditing changes. While you can create logs-based alerts for specific events, they do not provide a comprehensive audit trail of all changes. The requirement is to identify who made a change and when, which is better served by audit logs.
Go deeper
Related to this question
Learn chapter
Cloud Storage: Objects and Buckets
Key term
Cloud storage
Cloud storage is a service that lets you save data on remote servers accessed over the internet instead of on your computer's hard drive.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
This PCA question is part of Courseiva's 807-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Google Cloud exam blueprint
This PCA practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCA exam.