QuestionQ336
Designing for security and complianceA company runs an application across multiple Compute Engine instances and generates 1 TB of logs each day. For compliance, the logs must be retained for at least two years. They must remain available for active querying for 30 days; afterward, they only need to be retained for audit purposes. You want to implement a compliant, cost-minimizing storage solution that follows Google-recommended practices. What should you do?
- A
- Install a Cloud Logging agent on all instances. 2. Create a sink to export logs into a regional Cloud Storage bucket. 3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month. 4. Configure a retention policy at the bucket level using bucket lock.
- B
- Write a daily cron job, running on all instances, that uploads logs into a Cloud Storage bucket. 2. Create a sink to export logs into a regional Cloud Storage bucket. 3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.
- C
- Install a Cloud Logging agent on all instances. 2. Create a sink to export logs into a partitioned BigQuery table. 3. Set a time_partitioning_expiration of 30 days.
- D
- Create a daily cron job, running on all instances, that uploads logs into a partitioned BigQuery table. 2. Set a time_partitioning_expiration of 30 days.
Community Discussion