PCSE Practice Question: Managing Operations in a Cloud Solution Environment
A company wants to ensure compliance with PCI DSS by monitoring access to BigQuery datasets containing sensitive data. They need to log all read operations and enable real-time alerting for anomalous access. Which TWO actions should they take? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a log sink to export BigQuery Data Access logs to Pub/Sub.
BigQuery Data Access logs record read operations but are not enabled by default. To enable them, you must explicitly enable Data Access logs for BigQuery. For real-time alerting, you can export logs to Pub/Sub and process them with a Cloud Function.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a log sink to export BigQuery Data Access logs to Pub/Sub.
Why this is correct
Pub/Sub enables real-time streaming for alerting.
- ✗
Enable Admin Activity logs for BigQuery.
Why it's wrong here
Admin Activity logs only record configuration changes, not data reads.
- ✓
Enable Data Access logs for BigQuery.
Why this is correct
This logs all read and write operations on BigQuery data.
- ✗
Use Security Command Center to detect sensitive data access.
Why it's wrong here
SCC does not monitor BigQuery data access directly.
- ✗
Create a BigQuery view to restrict access to sensitive columns.
Why it's wrong here
Views control access but do not log read operations.
Go deeper
Related to this question
About these practice questions
This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.