What solution should you propose?

You are a security engineer at a finance company. Your organization plans to store data on Google Cloud, but your leadership team is worried about the security of their highly sensitive data Specifically, your

company is concerned about internal Google employees’ ability to access your company’s data on Google Cloud .

What solution should you propose?
A . Use customer-managed encryption keys.
B . Use Google’s Identity and Access Management (IAM) service to manage access controls on Google Cloud.
C . Enable Admin activity logs to monitor access to resources.
D . Enable Access Transparency logs with Access Approval requests for Google employees.

Answer: B

Explanation:

Reference: https://cloud.google.com/blog/products/identity-security/simplifying-identity-and-access-management-of-your-employees-partners-and-customers