Google Exam Professional-Cloud-Architect Topic 1 Question 78 Discussion

Actual exam question for Google's Google Cloud Architect Professional exam

Question #: 78
Topic #: 1

[All Google Cloud Architect Professional Questions]

Your company has an application that is running on multiple instances of Compute Engine. It generates 1 TB per day of logs. For compliance reasons, the logs need to be kept for at least two years. The logs need to be available for active query for 30 days. After that, they just need to be retained for audit purposes. You want to implement a storage solution that is compliant, minimizes costs, and follows Google-recommended practices. What should you do?

A1. Install the Cloud Ops agent on all instances.
2. Create a sink to export logs into a partitioned BigQuery table.
3. Set a time_partitioning_expiration of 30 days.

B1. Install the Cloud Ops agent on all instances.
2. Create a sink to export logs into a regional Cloud Storage bucket.
3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.
4. Configure a retention policy at the bucket level to create a lock.

C1. Create a daily cron job, running on all instances, that uploads logs into a partitioned BigQuery
table. 2. Set a time_partitioning_expiration of 30 days.

D1. Write a daily cron job, running on all instances, that uploads logs into a Cloud Storage bucket.
2. Create a sink to export logs into a regional Cloud Storage bucket.
3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

Show Suggested Answer

Suggested Answer: B

The practice for managing logs generated on Compute Engine on Google Cloud is to install the Cloud Logging agent and send them to Cloud Logging.

The sent logs will be aggregated into a Cloud Logging sink and exported to Cloud Storage.

The reason for using Cloud Storage as the destination for the logs is that the requirement in question requires setting up a lifecycle based on the storage period.

In this case, the log will be used for active queries for 30 days after it is saved, but after that, it needs to be stored for a longer period of time for auditing purposes.

If the data is to be used for active queries, we can use BigQuery's Cloud Storage data query feature and move the data past 30 days to Coldline to build a cost-optimal solution.

Therefore, the correct answer is as follows

1. Install the Cloud Logging agent on all instances.

Create a sync that exports the logs to the region's Cloud Storage bucket.

3. Create an Object Lifecycle rule to move the files to the Coldline Cloud Storage bucket after one month. 4.

4. set up a bucket-level retention policy using bucket locking.'

by Iluminada at Mar 17, 2024, 04:23 PM

Limited Time Offer

25%

Option B does sound like the best choice. Exporting logs to a regional Cloud Storage bucket and then moving them to Coldline for long-term retention is a solid plan. The retention policy will ensure the logs are kept for the required two years.

upvoted 0 times

...

Jolene

6 months ago

Hmm, this is a tricky one. We need a solution that is compliant, cost-effective, and follows Google's recommended practices. I'm leaning towards option B - it seems to cover all the requirements.

upvoted 0 times

...