Soru

Zorluk: KolayMonitoring and Logging

A cloud engineer needs to collect detailed system memory utilization metrics and application log files from a newly deployed fleet of Compute Engine virtual machine instances. Which TWO configuration steps should the engineer perform to fulfill these telemetry requirements following Google Cloud recommended practices?

  1. Install the unified Google Cloud Ops Agent on each VM instance.Cevap
  2. B
    Install the standalone legacy Stackdriver Logging and Monitoring agents on each VM instance.
  3. Grant the service account attached to the VM instances the Monitoring Metric Writer and Logs Writer roles.Cevap
  4. D
    Grant the primitive Owner role to the Compute Engine default service account.

Cevap

To collect system memory metrics and log files from Compute Engine instances using Google Cloud recommended practices, you must install the unified Google Cloud Ops Agent on the VM instances and ensure the VM service account is assigned least-privilege predefined roles (Monitoring Metric Writer and Logs Writer).
The correct steps involve installing the unified Google Cloud Ops Agent on the VM instances and granting the VM service account the specific predefined IAM roles for Monitoring Metric Writer and Logs Writer. The Ops Agent gathers system-level metrics such as memory utilization and application logs, while the predefined IAM roles authorize telemetry data export securely under the principle of least privilege.

Adım Adım Çözüm

1
Identify the recommended telemetry agent for Google Cloud Compute Engine instances.
The unified Google Cloud Ops Agent replaces legacy agents and combines metric and log collection.
Google Cloud recommends the Ops Agent for all new VM observability setups.
2
Determine the necessary IAM roles for exporting metrics and logs to Google Cloud Observability.
Assign the predefined roles Monitoring Metric Writer (roles/monitoring.metricWriter) and Logs Writer (roles/logging.logWriter) to the service account.
Following the principle of least privilege ensures proper write access without granting excessive administrative permissions.

Anahtar Kavram

Google Cloud Ops Agent installation and IAM permission requirements for VM telemetry.
Bu soruyu puanla