Google Cloud Professional Cloud Architect — Question 170

You want to allow your operations team to store logs from all the production projects in your Organization, without including logs from other projects. All of the production projects are contained in a folder. You want to ensure that all logs for existing and new production projects are captured automatically. What should you do?

Answer options

• A. Create an aggregated export on the Production folder. Set the log sink to be a Cloud Storage bucket in an operations project.
• B. Create an aggregated export on the Organization resource. Set the log sink to be a Cloud Storage bucket in an operations project.
• C. Create log exports in the production projects. Set the log sinks to be a Cloud Storage bucket in an operations project.
• D. Create log exports in the production projects. Set the log sinks to be BigQuery datasets in the production projects, and grant IAM access to the operations team to run queries on the datasets.

Correct answer: A

Explanation

Option A is correct because creating an aggregated export on the Production folder ensures that all logs from both existing and new production projects are captured, while directing them to a designated Cloud Storage bucket. Options B and C do not limit the logs to only production projects, and Option D complicates the setup by using BigQuery datasets instead of Cloud Storage, which is not necessary for simply storing logs.