Google Cloud Professional Cloud Security Engineer — Question 200

You manage the security logs within your cloud environment. You have configured a continuous export of security logs to Cloud Storage buckets for long-term retention. You need to provide auditors the ability to analyze the logs that were exported to Cloud Storage. Your solution must be cost-effective and quickly implemented.

What should you do?

Answer options

• A. Use a VM instance to download the data from Cloud Storage. Provide the auditors access to the VM and allow them to install their preferred analytics toolset.
• B. Use the data in the Cloud Storage bucket as an external table in BigQuery. Provide the auditors access to the BigQuery dataset.
• C. Use Dataflow to import the data from Cloud Storage into Elasticsearch. Provide the auditors with access to Elasticsearch.
• D. Use a Cloud Run job to import the log data from Cloud Storage to Cloud Logging. Provide the auditors access through Log Analytics.

Correct answer: B

Explanation

The correct answer is B because using BigQuery as an external table allows for efficient analysis of the data directly from Cloud Storage without the need for additional infrastructure. Options A and C require more resources and setup time, while D does not provide the same level of direct access and analysis capabilities that BigQuery offers.