Google Cloud Professional Cloud Architect — Question 15

Your architecture calls for the centralized collection of all admin activity and VM system logs within your project.
How should you collect these logs from both VMs and services?

Answer options

• A. All admin and VM system logs are automatically collected by Stackdriver.
• B. Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.
• C. Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.
• D. Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.

Correct answer: B

Explanation

The correct option is B because it specifies that while Stackdriver automatically collects admin activity logs for many services, the Stackdriver Logging agent is necessary on each VM for system logs. Option A is incorrect as it implies all logs are collected without additional configuration. Option C suggests using a custom syslogd instance, which is not required if using Stackdriver. Option D limits log collection to a single instance, which does not meet the requirement of centralized log collection from all VMs.