Google Cloud Professional Cloud Network Engineer — Question 223

You plan to deploy Google Cloud Armor web application firewall (WAF) policies that use the preconfigured WAF rules. You want all Google Cloud Armor logs to be sent to Cloud Logging with the highest level of detail possible. You have enabled Cloud Load Balancing logs for all the backend services where Cloud Armor WAF policies are applied. What should you do?

Answer options

• A. Set the sample rate of the Cloud Load Balancing logs to 0.5.
• B. Set the Google Cloud Armor logging option to VERBOSE.
• C. Enable Google Cloud Armor logging for all the backend services where Cloud Armor WAF policies are applied. Set the Google Cloud Armor logging option to VERBOSE.
• D. Set the sample rate of the Cloud Load Balancing logs to 1.0.

Correct answer: B

Explanation

The correct answer is B because setting the Google Cloud Armor logging option to VERBOSE will ensure that the highest level of detail is captured in the logs. Options A and D are incorrect as adjusting the sample rate does not guarantee the highest detail, while option C, although it suggests enabling logging, adds unnecessary steps since option B alone achieves the goal.