A roles/logging.viewer (Logs Viewer) gives you read-only access to all features of Logging, except Access Transparency logs and Data Access audit logs.

correct A

A is the correct answer. As B is talking about private logs viewer, there is nothing like that role in GCP.

B, https://cloud.google.com/logging/docs/routing/overview

A - correct option

the correct answer is A, the privateLogViewer gives extra access to Data Access Logs that's is not required https://cloud.google.com/logging/docs/view/logs-explorer-interface

Answer A

A is correct, Private Logs Viewer gives you extra access to Data access logs and the question was about viewing application logs.

The correct answer is "A"

Default tier is premium. There is NO mention of the load balancer being used and there is no default for this.

Ans: Option A. :Logs Viewer role. Least config setup (as per question). Option B is incorrect due to additional audit log viewing access which is inappropriate to this question. ref: https://cloud.google.com/logging/docs/access-control

Option A (Least config settings). Option B - Private viewer log is for viewing data audit logs. "The Logs Viewer role doesn't let principals read the Data Access audit logs that are in the _Default bucket. To read these Data Access audit logs, principals need the Private Logs Viewer role (roles/logging.privateLogViewer) for the appropriate log view." ref: https://cloud.google.com/logging/docs/access-control

A. OK B. Logs Private Logs is for Data Logs C. Nope D. what?

A) You only need logging.viewer https://cloud.google.com/logging/docs/access-control

Looks like answer A is correct. A logging agent is required to enable the custom logs pushed to Stackdriver https://cloud.google.com/logging/docs/agent/logging . Developers need only Log Viewer permission, which is enough in this case and Private Log viewer is a superset of log viewer permission with elevated permission to view the private data in logs. Which is not needed in this case.

Correct Answer is A

B is correct as it talks about application logs https://cloud.google.com/logging/docs/access-control The Logs Viewer role doesn't let you read the Data Access audit logs that are in the _Default bucket roles/logging.privateLogViewer (Private Logs Viewer) includes all the permissions contained by roles/logging.viewer, plus the ability to read Data Access audit logs in the _Default