Google Cloud Professional Cloud DevOps Engineer — Question 107
Your company operates in a highly regulated domain that requires you to store all organization logs for seven years. You want to minimize logging infrastructure complexity by using managed services. You need to avoid any future loss of log capture or stored logs due to misconfiguration or human error. What should you do?
Answer options
- A. Use Cloud Logging to configure an aggregated sink at the organization level to export all logs into a BigQuery dataset.
- B. Use Cloud Logging to configure an aggregated sink at the organization level to export all logs into Cloud Storage with a seven-year retention policy and Bucket Lock.
- C. Use Cloud Logging to configure an export sink at each project level to export all logs into a BigQuery dataset
- D. Use Cloud Logging to configure an export sink at each project level to export all logs into Cloud Storage with a seven-year retention policy and Bucket Lock.
Correct answer: B
Explanation
The correct answer is B because it uses an aggregated sink at the organization level, which centralizes log management and enhances data retention with Cloud Storage's seven-year policy and Bucket Lock, ensuring logs are protected against deletion. Options A and C do not provide the necessary retention policy and risk losing logs, while option D complicates the infrastructure by managing separate sinks for each project, increasing the chance of misconfiguration.