ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam
Go to Exam

Exam Professional Cloud Security Engineer topic 1 question 203 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 203
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your organization must comply with the regulation to keep instance logging data within Europe. Your workloads will be hosted in the Netherlands in region europe-west4 in a new project. You must configure Cloud Logging to keep your data in the country.

What should you do?

  • A. Configure the organization policy constraint gcp.resourceLocations to europe-west4.
  • B. Configure log sink to export all logs into a Cloud Storage bucket in europe-west4.
  • C. Create a new log bucket in europe-west4, and redirect the _Default bucket to the new bucket.
  • D. Set the logging storage region to europe-west4 by using the gcloud CLI logging settings update.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by pfilourenco at Aug. 4, 2023, 9:44 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
desertlotus1211
Highly Voted 1 year, 7 months ago
Answer is C: https://cloud.google.com/logging/docs/regionalized-logs This guide walks through this process using the example of redirecting all logs to the europe-west1 region. This process involves the following steps: Create a log bucket in the designated region for storing the logs. Redirect the _Default sink to route the logs to the new log bucket. Search for logs in the Logs Explorer. (Optional) Update the log retention period.
upvoted 7 times
ElviraRrr
1 year, 7 months ago
Note: After you create your log bucket, you can't change your bucket's region. If you need a bucket in a different region, you must create a new bucket in that region, redirect the appropriate sinks to the new bucket, and then delete the old bucket. https://cloud.google.com/logging/docs/buckets#create_bucket
upvoted 3 times
...
desertlotus1211
1 year, 3 months ago
The question ask for a NEW bucket. not change the existing.. C is correct
upvoted 1 times
...
espressoboy
1 year, 7 months ago
Is this not project specific though? The command has us specify the project for us to apply this redirect too, e.g.: gcloud logging sinks update _Default \ logging.googleapis.com/projects/logs-test-project/locations/europe-west1/buckets/region-1-logs-bucket If this org is deploying workloads across different projects surely those projects will each have a new _Default log sink? To cover this use case you'll need Option D "https://cloud.google.com/logging/docs/default-settings#view-org-settings" : "if you want to automatically apply a particular storage region to the new _Default and _Required buckets created in your organization, you can configure default resource location" Option D Let's us configure Org level regionalisation for all new _Default Log sinks.
upvoted 2 times
...
...
JohnDohertyDoe
Most Recent 4 months ago
Selected Answer: D
https://cloud.google.com/sdk/gcloud/reference/logging/settings/update#--storage-location The question talks about a new project, so this is the better solution. If it was an existing project, then it would make sense to create a new log bucket and redirect (Option C).
upvoted 1 times
...
BPzen
4 months, 4 weeks ago
Selected Answer: C
Why Option C is Correct Log Buckets and Regional Compliance: Cloud Logging allows you to create log buckets in specific regions to comply with data residency requirements. By creating a log bucket in europe-west4, you ensure that all logs are stored within the required region. Redirecting the _Default Bucket: The _Default bucket is used by Cloud Logging to store logs by default. Redirecting logs from the _Default bucket to the newly created regional log bucket ensures that all logs are compliant with the regulation.
upvoted 1 times
...
Mr_MIXER007
7 months, 3 weeks ago
Selected Answer: C
Create a new log bucket in europe-west4, and redirect the _Default bucket to the new bucket
upvoted 1 times
...
Potatoe2023
1 year ago
Selected Answer: C
Answer is C according to: https://cloud.google.com/storage/docs/moving-buckets
upvoted 2 times
...
Bettoxicity
1 year ago
Selected Answer: D
D: Granular Control: Using gcloud CLI logging settings update specifically targets the logging storage region. This ensures logs are stored in the desired region (europe-west4) without affecting other settings. Why not C: Creating a new bucket in europe-west4 and redirecting the default bucket wouldn't change the storage region of existing logs. It might only affect future logs written to the new bucket.
upvoted 3 times
...
glb2
1 year, 1 month ago
Selected Answer: C
https://cloud.google.com/logging/docs/default-settings#specify-region
upvoted 3 times
...
rushi000001
1 year, 1 month ago
Answer C: Log Bucket is on Project level gcloud CLI logging settings update work on Org/Folder level, if we apply on Org/Folder level it will update for all Projects which may using other regions in Europe
upvoted 4 times
...
b6f53d8
1 year, 2 months ago
Selected Answer: C
you need to create new bucket in specific region
upvoted 4 times
...
chimz2002
1 year, 6 months ago
Selected Answer: D
D. Set the logging storage region to Europe-west4 using the gcloud CLI logging settings update. Here's how this option aligns with the requirement: By setting the logging storage region to Europe-west4, you ensure that the log data will be stored in the specified region, which complies with the regulation to keep instance logging data within Europe.
upvoted 1 times
...
ElviraRrr
1 year, 7 months ago
Selected Answer: C
Note: After you create your log bucket, you can't change your bucket's region. If you need a bucket in a different region, you must create a new bucket in that region, redirect the appropriate sinks to the new bucket, and then delete the old bucket. https://cloud.google.com/logging/docs/buckets#create_bucket
upvoted 2 times
...
cyberpunk21
1 year, 8 months ago
Selected Answer: D
D is correct
upvoted 1 times
...
anshad666
1 year, 8 months ago
Selected Answer: D
https://cloud.google.com/logging/docs/default-settings#config-logging
upvoted 1 times
...
RuchiMishra
1 year, 8 months ago
Selected Answer: C
https://cloud.google.com/logging/docs/default-settings#specify-region
upvoted 1 times
...
Mithung30
1 year, 8 months ago
Selected Answer: D
https://cloud.google.com/logging/docs/default-settings#config-logging
upvoted 1 times
...
pfilourenco
1 year, 8 months ago
Selected Answer: D
D is the correct option: gcloud logging settings update --organization=ORGANIZATION_ID --storage-location=LOCATION from: https://cloud.google.com/logging/docs/default-settings#config-logging
upvoted 2 times
...
a190d62
1 year, 8 months ago
Selected Answer: C
C https://cloud.google.com/logging/docs/regionalized-logs
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago