ExpertGCP ACE · Question 50 · Domain 5.3: Viewing audit logs
Your compliance department requires that all Admin Activity audit logs be retained for 5 years. By default, Cloud Logging only retains these logs for 400 days. You need to set up a solution to meet the compliance requirement while allowing the security team to perform complex SQL analysis on the historical logs.
Which TWO actions should you take? (Select TWO)
Your compliance department requires that all Admin Activity audit logs be retained for 5 years. By default, Cloud Logging only retains these logs for 400 days. You need to set up a solution to meet the compliance requirement while allowing the security team to perform complex SQL analysis on the historical logs.
Which TWO actions should you take? (Select TWO)
Answer options:
Create a Log Sink (Log Router) in Cloud Logging.
Increase the retention period in Cloud Logging to 5 years.
Set the destination of the Log Sink to a BigQuery dataset.
Set the destination of the Log Sink to a Cloud Storage bucket.
Export the logs manually using the gcloud logging read command every month.
How to approach this question
Full Answer
Common mistakes
Practice the full GCP Associate Cloud Engineer Practice Exam 4
50 questions · hints · full answers · grading