Question 1
AdvancedManage a solution that can span multiple database solutions · Assess auditing policies for managed services
A financial services firm is migrating its on-premises PostgreSQL database to Google Cloud. A key regulatory requirement is that all database administrator actions must be logged, including the exact SQL text of queries executed against administrative views. You have configured Cloud Audit Logs for the Cloud SQL for PostgreSQL instance, but the CISO reports that Data Access audit logs are not capturing the full text of SELECT statements run by DBAs. Which action is required to meet this compliance mandate?
Answer and explanation
Correct answer: A
Standard Cloud Audit Logs for Cloud SQL do not capture the full SQL text for data access events like SELECT queries for performance reasons. To meet the strict requirement of logging the exact SQL text for administrative queries, you must enable the pgaudit extension. This is done by setting the cloudsql.enable_pgaudit flag to on and then configuring the pgaudit.log flag to specify which classes of commands to log, such as READ for select statements.
