PROFESSIONAL-CLOUD-ARCHITECT · Question #300
You are designing a new insurance claims processing application that will be deployed on Google Kubernetes Engine (GKE) Your company's compliance team requires a complete and non- repudiable audit…
The correct answer is C. Enable GKE Audit Logging to send Kubernetes API server logs to Cloud Logging, and ensure. Enabling GKE Audit Logging records all interactions with the Kubernetes API server (such as deployments, config changes, kubectl exec/port-forward/secret access), including who performed each action and what they did. Combined with Cloud Audit Logs at the project level, this…
Question
Options
- AEnable Binary Authorization on the GKE cluster, and create a policy that requires all deployed
- BDeploy a DaemonSet to every node in the GKE cluster that runs a logging agent to collect and
- CEnable GKE Audit Logging to send Kubernetes API server logs to Cloud Logging, and ensure
- DActivate the Security Command Center Premium tier to analyze GKE logs and detect threats,
How the community answered
(41 responses)- A15% (6)
- B2% (1)
- C76% (31)
- D7% (3)
Explanation
Enabling GKE Audit Logging records all interactions with the Kubernetes API server (such as deployments, config changes, kubectl exec/port-forward/secret access), including who performed each action and what they did. Combined with Cloud Audit Logs at the project level, this provides a complete, tamper-resistant, and non-repudiable audit trail of all administrative operations from day one, satisfying the compliance requirements.
Topics
Community Discussion
No community discussion yet for this question.