When does Google Cloud write a Policy Denied audit log entry?

AWhen a VM restarts after maintenance

BWhen a Google Cloud service denies access because of a security policy violation

CWhen Data Access logging is disabled

DWhen a secret version is destroyed manually

Related Questions

Which service is Google Cloud's centralized vulnerability and threat reporting platform that also pr...

easy

Which Cloud Audit Logs type is always written and cannot be disabled?...

easy

For most Google Cloud services, which audit log type is disabled by default because of its potential...

medium

A reviewer has roles/logging.viewer but cannot read Data Access audit logs stored in the _Default bu...

medium

Where are audit logs stored by default in Cloud Logging?...

medium

View all Managing operations questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.