Google Professional Cloud Security Engineer Question 429
Select 3Google Cloud PlatformYour organization is designing a logging strategy for its workloads running on Google Cloud. They want to ensure compliance with regulatory requirements, optimize costs, and enable effective troubleshooting. Which of the following practices should you include in your logging strategy?
- A
Use Cloud Logging sinks to export logs to Cloud Storage for long-term archival and compliance.
- B
Enable logging at the DEBUG level for all services to capture the most detailed information.
- C
Implement log exclusion filters to reduce the ingestion of non-critical logs.
- D
Leverage Cloud Logging metrics to monitor anomalies and define alerts.
- E
Use a single project to store all logs across the organization for centralized management.
Show answer and explanation
Correct answers: A, C, D
Explanation
An effective logging strategy balances compliance, cost optimization, and operational efficiency. Exporting logs to Cloud Storage ensures long-term retention for audits. Exclusion filters reduce unnecessary log storage costs. Cloud Logging metrics help with proactive monitoring and troubleshooting. Logging at DEBUG level for all services is excessive and inefficient, and centralizing logs in a single project creates scalability and access issues.
- A. Correct.
Correct. Exporting logs to Cloud Storage provides cost-effective long-term retention and helps meet compliance requirements for regulatory audits.
- B. Incorrect.
Incorrect. Enabling DEBUG level logging for all services generates excessive logs, increasing costs and complicating log analysis. Logging should be configured at an appropriate level based on needs.
- C. Correct.
Correct. Log exclusion filters help reduce the ingestion of unnecessary logs, optimizing storage and cost while keeping critical logs intact.
- D. Correct.
Correct. Cloud Logging metrics enable teams to monitor trends, detect issues, and set up alerts, which are essential for effective troubleshooting.
- E. Incorrect.
Incorrect. While centralizing logs can be beneficial, using a single project for all logs can lead to scalability and access control challenges. It's better to use appropriate resource hierarchies for log management.