Daily logs are written to a Cloud Storage bucket. Authenticated users need frequent access to the most recent 14 days; an external auditor reviews logs annually. Data must be retained at least 7 years and costs should be minimized. Which two actions should you take?

To meet the 7-year retention requirement and minimize costs, you should use the Bucket Lock feature. This enforces an immutable retention policy on all objects in the bucket, preventing accidental deletion or modification for the specified duration. For cost optimization, a lifecycle management policy should be created to transition objects older than 14 days to Coldline storage. Coldline is suitable for data accessed less than once a month, aligning with the annual audit requirement, and offers a lower storage cost than Standard or Nearline. Nearline is incorrect because it's designed for data accessed less than once a month, not once a year, making Coldline more cost-effective for annual access. Running a scheduled job to manually change storage classes is less efficient and more error-prone than an automated lifecycle policy. JWTs are for authentication, not for managing storage classes or retention.