A manager wants to start retaining security event logs for 2 years while minimizing costs. You write a filter to select the appropriate log entries. Where should you export the logs?

The correct answer is B. Cloud Storage buckets. Cloud Storage (specifically Coldline or Archive storage classes) is the most cost-effective destination for long-term log retention. Logs exported via a Cloud Logging sink to a Cloud Storage bucket can be stored cheaply for years and accessed when needed for audits or…

Submitted by yasin.bd· Apr 18, 2026Ensuring compliance

Question

A manager wants to start retaining security event logs for 2 years while minimizing costs. You write a filter to select the appropriate log entries. Where should you export the logs?

Options

ABigQuery datasets
BCloud Storage buckets
CStackDriver logging
DCloud Pub/Sub topics

How the community answered

(23 responses)

A
17% (4)
B
70% (16)
C
9% (2)
D
4% (1)

Explanation

Cloud Storage (specifically Coldline or Archive storage classes) is the most cost-effective destination for long-term log retention. Logs exported via a Cloud Logging sink to a Cloud Storage bucket can be stored cheaply for years and accessed when needed for audits or compliance. BigQuery (A) is optimized for analytics with frequent queries and is significantly more expensive for pure archival storage. Cloud Logging / Stackdriver (C) has a maximum retention period (30 days by default, up to 3650 days with custom retention but at higher cost) and is not ideal for cost-optimized archiving. Cloud Pub/Sub (D) is a streaming message bus, not a storage system, and cannot retain logs for 2 years.

Topics

#Log retention#Cloud Storage#Cost optimization#Security logging

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice