Your company runs services on Google Cloud. Each team runs their applications in a dedicated project. New teams and projects are created regularly. Your security team requires that all logs are…

Question

Options

• ACreate an organization-level aggregated sink with a log bucket as the destination. Set an
• BCreate a folder-level aggregated sink with a siem Pub/Sub topic as the destination. Set an
• CCreate an organization-level aggregated sink with a siem Pub/Sub topic as the destination. Set an
• DCreate a project-level logging sink with a siem Pub/Sub topic as the destination. Set an inclusion

• A
  6% (2)
• B
  3% (1)
• C
  79% (27)
• D
  12% (4)

Explanation

Organization-level aggregated sink allows you to collect logs from all projects within your Google Cloud organization, ensuring that logs from new projects are automatically included without additional configuration. By setting the sink to a Pub/Sub topic, you enable seamless ingestion of logs by the SIEM system, which relies on Pub/Sub for log processing. Using an inclusion filter to include all logs ensures that all relevant log types are captured, satisfying the security team's requirement for comprehensive logging. This setup is scalable and aligns with best practices for managing logs in a multi-project environment.

No community discussion yet for this question.