Google Exam Professional-Cloud-Architect Topic 4 Question 76 Discussion

Actual exam question for Google's Google Cloud Architect Professional exam

Question #: 76
Topic #: 4

[All Google Cloud Architect Professional Questions]

Your company has an application that is running on multiple instances of Compute Engine. It generates 1 TB per day of logs. For compliance reasons, the logs need to be kept for at least two years. The logs need to be available for active query for 30 days. After that, they just need to be retained for audit purposes. You want to implement a storage solution that is compliant, minimizes costs, and follows Google-recommended practices. What should you do?

A1. Install the Cloud Ops agent on all instances.
2. Create a sink to export logs into a partitioned BigQuery table.
3. Set a time_partitioning_expiration of 30 days.

B1. Install the Cloud Ops agent on all instances.
2. Create a sink to export logs into a regional Cloud Storage bucket.
3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.
4. Configure a retention policy at the bucket level to create a lock.

C1. Create a daily cron job, running on all instances, that uploads logs into a partitioned BigQuery
table. 2. Set a time_partitioning_expiration of 30 days.

D1. Write a daily cron job, running on all instances, that uploads logs into a Cloud Storage bucket.
2. Create a sink to export logs into a regional Cloud Storage bucket.
3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

Show Suggested Answer

Suggested Answer: B

The practice for managing logs generated on Compute Engine on Google Cloud is to install the Cloud Logging agent and send them to Cloud Logging.

The sent logs will be aggregated into a Cloud Logging sink and exported to Cloud Storage.

The reason for using Cloud Storage as the destination for the logs is that the requirement in question requires setting up a lifecycle based on the storage period.

In this case, the log will be used for active queries for 30 days after it is saved, but after that, it needs to be stored for a longer period of time for auditing purposes.

If the data is to be used for active queries, we can use BigQuery's Cloud Storage data query feature and move the data past 30 days to Coldline to build a cost-optimal solution.

Therefore, the correct answer is as follows

1. Install the Cloud Logging agent on all instances.

Create a sync that exports the logs to the region's Cloud Storage bucket.

3. Create an Object Lifecycle rule to move the files to the Coldline Cloud Storage bucket after one month. 4.

4. set up a bucket-level retention policy using bucket locking.'

by Matthew at Feb 12, 2024, 09:48 PM

Limited Time Offer

25%

6 months ago

Option B definitely looks like the way to go. Exporting the logs to a regional Cloud Storage bucket, tiering the data to Coldline after a month, and setting a retention policy at the bucket level - that should do the trick.

upvoted 0 times

Gayla

6 months ago

B) 4. Configure a retention policy at the bucket level to create a lock.

upvoted 0 times

...

Christiane

6 months ago

B) 3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

upvoted 0 times

...

Bulah

6 months ago

B) 2. Create a sink to export logs into a regional Cloud Storage bucket.

upvoted 0 times

...

In

6 months ago

B) 1. Install the Cloud Ops agent on all instances.

upvoted 0 times

...

Cammy

6 months ago

Hmm, this is a tricky one. We need to find a solution that is compliant, cost-effective, and aligns with Google's best practices. I'm leaning towards option B, as it seems to cover all the requirements.

upvoted 0 times

...