Exam Associate Cloud Engineer topic 1 question 257 discussion

Actual exam question from Google's Associate Cloud Engineer

Question #: 257
Topic #: 1

[All Associate Cloud Engineer Questions]

After a recent security incident, your startup company wants better insight into what is happening in the Google Cloud environment. You need to monitor unexpected firewall changes and instance creation. Your company prefers simple solutions. What should you do?

A. Create a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Cloud Storage. Use BigQuery to periodically analyze log events in the storage bucket.
B. Use Cloud Logging filters to create log-based metrics for firewall and instance actions. Monitor the changes and set up reasonable alerts.
C. Install Kibana on a compute instance. Create a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Pub/Sub. Target the Pub/Sub topic to push messages to the Kibana instance. Analyze the logs on Kibana in real time.
D. Turn on Google Cloud firewall rules logging, and set up alerts for any insert, update, or delete events.

Show Suggested Answer

Suggested Answer: B 🗳️

by KelvinToo at Dec. 31, 2023, 6:35 p.m.

Comments

Submit Cancel

Stargazer11

Highly Voted 1 year, 5 months ago

Selected Answer: B

log sink is advanced and it is used for routing logs to specific destinations. so answer B

upvoted 6 times

...

Pime13

Most Recent 10 months, 2 weeks ago

Selected Answer: D

https://cloud.google.com/firewall/docs/firewall-rules-logging

upvoted 1 times

peddyua

5 months ago

doesn't cover VM actions create|start|stop|terminate etc.

upvoted 1 times

...

BuenaCloudDE

11 months, 2 weeks ago

Selected Answer: B

I think that key-words is "After a recent security incident", you need be notified if something happening with so important thing like secure.

upvoted 3 times

...

blackBeard33

1 year, 4 months ago

Selected Answer: B

B is a simple solution.

upvoted 3 times

...

interesting_owl

1 year, 5 months ago

Selected Answer: A

this is simple.

upvoted 1 times

...

KelvinToo

1 year, 6 months ago

Selected Answer: B

Per ChatGPT, Option B provides a simple and effective solution using native Google Cloud services (Cloud Logging and log-based metrics) to monitor unexpected firewall changes and instance creation, while also allowing for the setup of reasonable alerts to ensure timely response to any security incidents.

upvoted 2 times

...