Google Cloud Professional Cloud Architect — Question 171

Your company has an application that is running on multiple instances of Compute Engine. It generates 1 TB per day of logs. For compliance reasons, the logs need to be kept for at least two years. The logs need to be available for active query for 30 days. After that, they just need to be retained for audit purposes. You want to implement a storage solution that is compliant, minimizes costs, and follows Google-recommended practices. What should you do?

Answer options

• A. 1. Install a Cloud Logging agent on all instances. 2. Create a sink to export logs into a regional Cloud Storage bucket. 3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month. 4. Configure a retention policy at the bucket level using bucket lock.
• B. 1. Write a daily cron job, running on all instances, that uploads logs into a Cloud Storage bucket. 2. Create a sink to export logs into a regional Cloud Storage bucket. 3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.
• C. 1. Install a Cloud Logging agent on all instances. 2. Create a sink to export logs into a partitioned BigQuery table. 3. Set a time_partitioning_expiration of 30 days.
• D. 1. Create a daily cron job, running on all instances, that uploads logs into a partitioned BigQuery table. 2. Set a time_partitioning_expiration of 30 days.

Correct answer: A

Explanation

Option A is correct because it utilizes a Cloud Logging agent for efficient log collection, exports logs to a Cloud Storage bucket, and implements lifecycle rules and retention policies ensuring compliance and cost-effectiveness. Option B lacks the use of a Cloud Logging agent, making it less efficient. Option C doesn't meet the long-term storage requirement as it directs logs to BigQuery, which is more costly for retention. Option D also directs logs to BigQuery, lacking compliance with the retention policy needed for audit purposes.