Exam Professional Cloud Architect topic 1 question 132 discussion

Actual exam question from Google's Professional Cloud Architect

Question #: 132
Topic #: 1

[All Professional Cloud Architect Questions]

Your company sends all Google Cloud logs to Cloud Logging. Your security team wants to monitor the logs. You want to ensure that the security team can react quickly if an anomaly such as an unwanted firewall change or server breach is detected. You want to follow Google-recommended practices. What should you do?

A. Schedule a cron job with Cloud Scheduler. The scheduled job queries the logs every minute for the relevant events.
B. Export logs to BigQuery, and trigger a query in BigQuery to process the log data for the relevant events.
C. Export logs to a Pub/Sub topic, and trigger Cloud Function with the relevant log events.
D. Export logs to a Cloud Storage bucket, and trigger Cloud Run with the relevant log events.

Show Suggested Answer

Suggested Answer: C 🗳️

by crazyaboutazure at July 3, 2021, 11:24 p.m.

Comments

Submit Cancel

kopper2019

Highly Voted 3 years, 5 months ago

I think C using BigQuery can get expensive if you have somehow check the logs for anomalies https://cloud.google.com/blog/products/management-tools/automate-your-response-to-a-cloud-logging-event check there is a diagram

upvoted 48 times

poseidon24

3 years, 4 months ago

Thanks for pointing out the reference. C is the correct one. Nevertheless the question and all the answers are missleading, even C) sounds like sending all the logs to pub/sub, it should mention about "filtering" prior to send to Pub/Sub.

upvoted 10 times

...

AzureDP900

2 years, 2 months ago

C is absolutely make sense, Thank you for sharing the link.

upvoted 3 times

...

amxexam

3 years, 3 months ago

It may get expensive but GCP recommended way , they not asking for self alternative for cheap solution.

upvoted 4 times

...

Urban_Life

3 years ago

cloud function is also key point

upvoted 2 times

...

Load full discussion...

...

1 year, 6 months ago

One of your key employees received a job offer from another cloud company. S/he left the Organization without giving notice. His Google Account was kept active for 3 weeks. How can you find out if the employee accessed any sensitive data after s/he left?

upvoted 1 times