Your startup has never implemented a formal security policy. Currently, everyone in the company has access to the datasets stored in Google BigQuery. Teams
have freedom to use the service as they see fit, and they have not documented their use cases. You have been asked to secure the data warehouse. You need to
discover what everyone is doing. What should you do first?
A. Use Google Stackdriver Audit Logs to review data access.
B. Get the identity and access management IIAM) policy of each table
C. Use Stackdriver Monitoring to see the usage of BigQuery query slots.
D. Use the Google Cloud Billing API to see what account the warehouse is being billed to.
Answer: A
✅ Explanation
-To secure your BigQuery data warehouse, your first step should be to understand how it’s currently being used. Since there's no formal policy or documentation, you need visibility into who is accessing what data and how. The best tool for this is:
✅ A. Use Google Stackdriver Audit Logs (now part of Cloud Logging)
Audit logs capture detailed records of:
Who accessed BigQuery datasets and tables
When the access occurred
-What operations were performed (e.g., queries, reads, writes)
This allows you to:
Identify over-permissioned users
Understand team use cases
-Establish a foundation for least privilege access control
-It provides historical, user-level insights, which are essential before you make policy changes.