Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ144

Managing operations

Your team must obtain a unified view of logs from all development cloud projects in its SIEM. The development projects are located under the NONPROD organization folder along with the test and pre-production projects. The development projects use the ABC-BILLING billing account, which is shared with the rest of the organization.

Which logging export strategy should you use to meet these requirements?

  • A
    1. Export logs to a Cloud Pub/Sub topic with folders/NONPROD parent and includeChildren property set to True in a dedicated SIEM project. 2. Subscribe SIEM to the topic.
  • B
    1. Create a Cloud Storage sink with billingAccounts/ABC-BILLING parent and includeChildren property set to False in a dedicated SIEM project. 2. Process Cloud Storage objects in SIEM.
  • C
    1. Export logs in each dev project to a Cloud Pub/Sub topic in a dedicated SIEM project. 2. Subscribe SIEM to the topic.
  • D
    1. Create a Cloud Storage sink with a publicly shared Cloud Storage bucket in each project. 2. Process Cloud Storage objects in SIEM.
Explanation

A project-level log sink in each development project can route logs to a shared Cloud Pub/Sub topic in the dedicated SIEM project, giving the SIEM a single feed for exactly those projects. A folder-level aggregated sink at NONPROD would also include its test and pre-production child projects, while a billing-account scope would encompass projects sharing the billing account outside the development set. Cloud Logging supports routing logs to Pub/Sub topics, and folder or organization aggregated sinks with includeChildren collect logs from all child resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!