Exam Professional Cloud Network Engineer topic 1 question 107 discussion

Answer B seems to be the better choice: https://cloud.google.com/armor/docs/troubleshooting "Review the HTTP(S) logs to determine which policy and rule were matched for your traffic along with the associated action. To view the logs, use Cloud Logging."

D should be the answer

Enabling HTTP(S) Load Balancing logging with a sampling rate of 1 allows you to see detailed logs of all the traffic flowing through the load balancer, including any traffic that may have been blocked by Google Cloud Armor. By analyzing the logs in Cloud Logging, you can identify the specific WAF rule that is blocking the traffic and adjust your Google Cloud Armor security policy accordingly.

B Because Google Cloud Armor logs are part of the Cloud Load Balancing logs, Google Cloud Armor log generation is subject to the log sampling rate configured for your load balancer. If you reduce the sampling rate for your HTTP(S) Load Balancing, External TCP Proxy Load Balancing, or External SSL Proxy Load Balancing, your Google Cloud Armor requests logs are sampled at that reduced rate. D doesn't exist

• B. Enable HTTP(S) ***** Load Balancing logging with sampling rate equal to 1, and view the logs in Cloud Logging. Remember: Where there is Cloud Armor there is HTTP(S) Load Balancer

B is correct

Its B as it uses the LB for logging: https://cloud.google.com/armor/docs/best-practices

I think is B. https://cloud.google.com/armor/docs/troubleshooting#traffic-allowed-despite-deny-rule