Google Professional Cloud DevOps Engineer Question 119
Select 4Google Cloud PlatformYour company is using Google Cloud Platform to host a set of microservices running on Google Kubernetes Engine (GKE). To troubleshoot performance issues, you need to collect logs from the application, network, and Kubernetes resources. Which of the following steps should you take to ensure comprehensive log collection across these components?
- A
Install the Cloud Logging agent on each GKE node to collect application and system logs.
- B
Enable Cloud Audit Logs to capture administrative and data access activities for GKE resources.
- C
Configure VPC Flow Logs on the subnet to monitor network traffic between microservices.
- D
Deploy a sidecar container with each service to collect service-specific logs and export them to Cloud Logging.
- E
Enable Cloud Service Mesh to automatically collect service-to-service communication logs.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To ensure comprehensive log collection in a GKE environment, you need to address multiple layers of the system: application, network, and service communication. The Cloud Logging agent collects application and system logs, Cloud Audit Logs track administrative activities, VPC Flow Logs monitor network traffic, and Cloud Service Mesh enables service-to-service communication logging. Deploying a sidecar container is redundant here, as GKE workloads can directly integrate with Cloud Logging.
- A. Correct.
Installing the Cloud Logging agent on each GKE node is necessary to collect application and system logs that are not natively exported by GKE.
- B. Correct.
Enabling Cloud Audit Logs helps monitor administrative and data access activities, which is essential for tracking changes and troubleshooting issues in GKE resources.
- C. Correct.
Configuring VPC Flow Logs on the subnet allows you to monitor network traffic, which can help diagnose connectivity and performance issues between microservices.
- D. Incorrect.
While deploying a sidecar container can collect service-specific logs, it is not necessary in this scenario as Cloud Logging can directly collect logs from GKE workloads.
- E. Correct.
Enabling Cloud Service Mesh provides automatic logging of service-to-service communication, which is crucial for monitoring and troubleshooting distributed systems.