Practice Test 1 | Google Cloud Certified Professional Cloud DevOps Engineer | Dumps | Mock Test
To meet security compliance of centrally collecting VPC Flow Logs, your company asked you to configure a Logs routing sink. The Sink destination is a Logging bucket in another project. After you configure the Logs Sink, a few days later one of the security team members points out that there are no logs in the logging bucket.
Which of the following is not a possible reason?
A. Flow Logs were not enabled in the monitored Project.
B. Firewall rules are blocking traffic.
C. Logging exclusion filters defined on the sink block specified logs
D. Viewing the wrong Logging bucket
Correct Answer: B
- Options A, C & D are incorrect. If Flow Logs are not enabled on the subnets to be monitored there will be no logs, also if logs exclusion filters are wrongly configured desired logs would be discarded. If the security team is looking in the wrong bucket there will not see the logs.
- Option B is CORRECT. Firewall rules do not affect the logs generated by Flow logs.
Reference:
Comments are closed, but trackbacks and pingbacks are open.