You plan to deploy Google Cloud Armor web application firewall (WAF) policies that use the preconfigured WAF rules. You want all Google Cloud Armor logs to be sent to Cloud Logging with the highest…

Question

Options

• ASet the sample rate of the Cloud Load Balancing logs to 0.5.
• BSet the Google Cloud Armor logging option to VERBOSE.
• CEnable Google Cloud Armor logging for all the backend services where Cloud Armor WAF
• DSet the sample rate of the Cloud Load Balancing logs to 1.0.

• A
  7% (4)
• B
  3% (2)
• C
  79% (46)
• D
  10% (6)

Explanation

Enable Google Cloud Armor logging: Logging must be explicitly enabled for each backend service where Cloud Armor WAF policies are applied. Without enabling this logging, detailed logs for Cloud Armor won't be generated. Set logging level to VERBOSE: The VERBOSE logging level captures the most detailed information, including request headers and more granular data about rule matches and actions taken by the WAF policies. This level provides the highest level of visibility for troubleshooting While enabling Cloud Load Balancing logs is necessary for general traffic logs, setting the Google Cloud Armor logging to VERBOSE ensures that all relevant WAF-related details are captured and sent to Cloud Logging.

No community discussion yet for this question.