What should you do?

A recent audit revealed that a new network was created in your GCP project. In this network, a GCE instance has an SSH port open to the world. You want to discover this network’s origin.

What should you do?
A . Search for Create VM entry in the Stackdriver alerting console
B . Navigate to the Activity page in the Home section. Set category to Data Access and search for Create VM entry
C . In the Logging section of the console, specify GCE Network as the logging section. Search for the Create Insert entry
D . Connect to the GCE instance using project SSH keys. Identify previous logins in system logs, and match these with the project owners list

Answer: C

Explanation:

Incorrect Answers:

A: To use the Stackdriver alerting console we must first set up alerting policies.

B: Data access logs only contain read-only operations.

Audit logs help you determine who did what, where, and when.

Cloud Audit Logging returns two types of logs:

– Admin activity logs

– Data access logs: Contains log entries for operations that perform read-only operations do not modify any data, such as get, list, and aggregated list methods.