Examkin

Question

Difficulty: EasyConfiguring Cloud Logging, Monitoring, and Operational Alerting

An operations team needs to export security audit logs from multiple Google Cloud projects into a central BigQuery dataset for long-term compliance analysis. Which Cloud Logging mechanism should be configured in each source project to route these log entries to the destination dataset?

  1. A log sink configured with an inclusion filter that specifies the central BigQuery dataset as the destinationAnswer
  2. B
    A custom IAM role assigning primitive Owner privileges to the default Cloud Logging service account
  3. C
    An exclusion filter applied to default log buckets combined with an advance regional quota request
  4. D
    An aggregate log exclusion filter that suppresses high-severity audit log entries from Cloud Logging ingestion

Answer

Configure a log sink in each source project with an inclusion filter set to export logs to the central BigQuery dataset.
In Google Cloud Logging, log sinks control the export of log entries. By creating a sink with an inclusion filter pointing to a BigQuery dataset destination, Cloud Logging automatically routes matching log entries to BigQuery.

Step-by-Step Solution

1
Identify the component used in Cloud Logging for external log routing.
Recognize that log sinks are the Google Cloud resource designed for routing log entries.
Log sinks specify filters to select log entries and define destinations outside or inside Cloud Logging.
2
Define inclusion criteria and destination details.
Set the inclusion filter for audit logs and specify the BigQuery dataset path.
Inclusion filters ensure only relevant audit log entries are forwarded to BigQuery.
3
Configure proper IAM authorization for the sink's writer identity.
Grant BigQuery Data Editor permissions to the sink service account on the target dataset.
The writer identity of the log sink requires permissions on the destination resource to append log data successfully.

Key Concept

Configuring log sinks in Google Cloud Logging for log export and centralization
Rate this question

Topics

Configuring Cloud Logging, Monitoring, and Operational Alerting