Medium1 markMultiple Choice
Domain 5.3: Viewing audit logsLoggingLog SinksDomain 5.3

GCP ACE · Question 50 · Domain 5.3: Viewing audit logs

You need to retain Admin Activity audit logs for 3 years for compliance reasons. By default, Cloud Logging only retains them for 400 days. Which TWO actions should you take to achieve this? (Select TWO)

Answer options:

A.

Create a log sink in Cloud Logging.

B.

Increase the retention period in the Cloud Logging settings to 3 years.

C.

Route the logs to a Cloud Storage bucket with a retention policy.

D.

Route the logs to Cloud Pub/Sub.

E.

Take a snapshot of the Cloud Logging database.

How to approach this question

Identify the mechanism for exporting logs (sink) and the best destination for long-term, low-cost storage.

Full Answer

Create a log sink in Cloud Logging. Route the logs to a Cloud Storage bucket with a retention policy.
To retain logs beyond the default Cloud Logging retention period, you must export them. You do this by creating a Log Sink. The sink uses a filter to select the Admin Activity logs and routes them to a destination. For long-term, compliance-based archiving (3 years), a Cloud Storage bucket (often using Archive storage class and a Bucket Lock retention policy) is the most cost-effective and appropriate destination.

Common mistakes

Trying to change the retention period directly in Cloud Logging beyond its maximum limits.

Practice the full GCP Associate Cloud Engineer Practice Exam 1

50 questions · hints · full answers · grading

More questions from this exam