Google Professional Cloud Security Engineer Question 427
Select 4Google Cloud PlatformYour organization has deployed a critical application in Google Cloud, and you are tasked with designing a logging strategy to ensure compliance with data retention policies, efficient troubleshooting, and minimal storage costs. Which of the following steps should you include in your logging strategy?
- A
Enable Cloud Audit Logs for all services, including Admin Activity, Data Access, and System Event logs.
- B
Set up log sinks to export logs to Cloud Storage with a lifecycle policy for long-term retention.
- C
Enable detailed debug-level logging for all services by default to capture all possible events.
- D
Use log-based metrics to monitor and alert on critical activities in your environment.
- E
Apply exclusion filters in Cloud Logging to avoid collecting unnecessary logs.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
An effective logging strategy in Google Cloud involves enabling critical logging features like Cloud Audit Logs, exporting logs to cost-effective storage solutions for compliance, setting up monitoring and alerting using log-based metrics, and avoiding unnecessary log collection with exclusion filters. Debug-level logging should not be enabled for all services by default, as it can generate excessive noise and increase costs.
- A. Correct.
Enabling Cloud Audit Logs for all services ensures that you capture critical activities, such as admin actions and system events, which are essential for auditing and compliance.
- B. Correct.
Exporting logs to Cloud Storage with a lifecycle policy allows for long-term retention at a lower cost, while adhering to data retention policies.
- C. Incorrect.
Enabling debug-level logging for all services by default is not recommended as it can generate excessive logs, increase storage costs, and make it harder to identify critical events.
- D. Correct.
Using log-based metrics allows you to monitor and create alerts for critical activities, improving your ability to respond to security incidents and operational issues.
- E. Correct.
Applying exclusion filters in Cloud Logging prevents the collection of unnecessary logs, reducing storage costs and improving the efficiency of your logging strategy.