Practice Test 2 | Google Cloud Certified Professional Cloud DevOps Engineer | Dumps | Mock Test
You are on the SRE team of your company. The client has decided to also keep the logs that record operations in Compute Engine that read user-provided data made in the Production project for Two years in order to fulfil a new compliance requirement.
Which of the following can help you achieve this? Choose TWO
A. Update the retention period of the _Required Logs bucket from 30 days to 730days.
B. Create a Logs Bucket with a retention period of 730 days. Create a new Logs Sink with the new Logs Bucket as destination and the inclusion filter of the _Required Sink .
C. Create a Logs Bucket with a retention period of 730days. Create a Logs Sink with the new Logs Bucket as destination and the inclusion filter of the _Default Sink.
D. Enable the Data Read audit logs for Compute Engine API
E. Enable the Data Write audit logs for Compute Engine API
Corrcet Answers: C and D
- Option A is incorrect. The _Required Logs Bucket cannot be edited.
- Option B is incorrect. The _ Required Logs Sink inclusion filters do not capture the specified logs.
- Option C is CORRECT. Creating a new Logs Bucket with the desired retention and Sink to collate the specified logs. The inclusion filter of the _Default Sink captures the specified logs.
- Option D is CORRECT. The Data Read audit log of the Compute Engine needs to be enabled
- Option E is incorrect. The Data Write audit log of the Compute Engine does not meet the criteria of logs specified.
Reference:
Comments are closed, but trackbacks and pingbacks are open.