Google Cloud Professional Cloud Security Engineer — Question 128

Your organization must comply with the regulation to keep instance logging data within Europe. Your workloads will be hosted in the Netherlands in region europe-west4 in a new project. You must configure Cloud Logging to keep your data in the country.

What should you do?

Answer options

• A. Configure the organization policy constraint gcp.resourceLocations to europe-west4.
• B. Configure log sink to export all logs into a Cloud Storage bucket in europe-west4.
• C. Create a new log bucket in europe-west4, and redirect the _Default bucket to the new bucket.
• D. Set the logging storage region to europe-west4 by using the gcloud CLI logging settings update.

Correct answer: C

Explanation

The correct answer is C because creating a new log bucket specifically in europe-west4 and redirecting the _Default bucket ensures that all logging data is retained within the specified region, meeting compliance requirements. Option A does not directly address the logging bucket configuration, B would not guarantee that logs stay in the correct location as it only exports logs, and D does not create a new log bucket but merely updates logging settings.