Google Cloud Professional Cloud Security Engineer — Question 301

You need to centralize your team's logs for production projects. You want your team to be able to search and analyze the logs using Logs Explorer. What should you do?

Answer options

• A. Enable Cloud Monitoring workspace, and add the production projects to be monitored.
• B. Use Logs Explorer at the organization level and filter for production project logs.
• C. Create an aggregate org sink at the parent folder of the production projects, and set the destination to a Cloud Storage bucket.
• D. Create an aggregate org sink at the parent folder of the production projects, and set the destination to a logs bucket.

Correct answer: D

Explanation

The correct option, D, is appropriate because it directs logs to a logs bucket, which is designed for log storage and analysis. Option A does not centralize logs; it merely enables monitoring. Option B only allows searching logs without centralization. Option C suggests using a Cloud Storage bucket, which is unsuitable for log analysis in this context.