Google Professional Cloud Security Engineer Question 425
Select 3Google Cloud PlatformYour organization runs a multi-tier application on Google Cloud, and you are designing a logging strategy to ensure compliance, troubleshoot issues effectively, and optimize storage costs. Which actions should you take as part of your logging strategy?
- A
Enable Cloud Audit Logs for all services to capture admin activity, data access, and system events.
- B
Use log exclusions in Cloud Logging to filter out irrelevant logs and reduce storage costs.
- C
Store logs indefinitely in Cloud Storage to ensure compliance with data retention policies.
- D
Implement log sinks to export logs to BigQuery for advanced analysis and monitoring.
- E
Disable logging for high-traffic services to minimize costs.
Show answer and explanation
Correct answers: A, B, D
Explanation
An effective logging strategy in Google Cloud balances compliance, cost optimization, and troubleshooting capabilities. This involves enabling Cloud Audit Logs for critical services, using log exclusions to filter out irrelevant logs, and leveraging log sinks to export logs for further analysis. Storing logs indefinitely or disabling logging altogether are not recommended practices, as they either lead to excessive costs or loss of critical data.
- A. Correct.
Enabling Cloud Audit Logs is essential for capturing critical events such as administrative actions, data access, and system events, which are needed for compliance and troubleshooting.
- B. Correct.
Using log exclusions can help filter out unnecessary logs (e.g., debug logs or non-critical data) to optimize storage costs while retaining essential information.
- C. Incorrect.
Storing logs indefinitely can become costly and is not always necessary. Instead, retention policies should align with compliance requirements.
- D. Correct.
Exporting logs to BigQuery using log sinks allows for advanced analysis and monitoring, enabling effective troubleshooting and insights.
- E. Incorrect.
Disabling logging for high-traffic services is not a best practice as it could lead to missing critical information needed for troubleshooting or compliance.