Exam Professional Cloud Security Engineer topic 1 question 20 discussion

Correct answer is (C): Scenarios for exporting Cloud Logging data: Splunk This scenario shows how to export selected logs from Cloud Logging to Pub/Sub for ingestion into Splunk. Splunk is a security information and event management (SIEM) solution that supports several ways of ingesting data, such as receiving streaming data out of Google Cloud through Splunk HTTP Event Collector (HEC) or by fetching data from Google Cloud APIs through Splunk Add-on for Google Cloud. Using the Pub/Sub to Splunk Dataflow template, you can natively forward logs and events from a Pub/Sub topic into Splunk HEC. If Splunk HEC is not available in your Splunk deployment, you can use the Add-on to collect the logs and events from the Pub/Sub topic. https://cloud.google.com/solutions/exporting-stackdriver-logging-for-splunk

C is the only way to go

I will go with C

Ans : C

As I was the Logging Service Manager when we set this up with GCP. I can verify that C is how we have it setup, based on the Google's recommendations.

I think the correct one its D because C mention "Dataflow" and it cannot be connected to any sink out of GCP.

Ans - C https://cloud.google.com/solutions/exporting-stackdriver-logging-for-splunk

C looks correct.. https://cloud.google.com/solutions/exporting-stackdriver-logging-for-splunk Splunk is on premises SIEM solution in above example.

I will go with Option B. Read this email for more reason. C is not workable solution so that is first one not to consider.

C is the answer.

I will go with C

C is correct