PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #178
You are deploying a web application hosted on Compute Engine. A business requirement mandates that application logs are preserved for 12 years and data is kept within European boundaries. You want…
The correct answer is B. Configure your Compute Engine instances to use the Google Cloud's operations suite Cloud. To meet the 12-year log retention and European data residency requirements with minimal overhead and cost-effectiveness for Compute Engine application logs, you should configure Google Cloud's operations suite (Cloud Logging) to route logs to a Cloud Storage bucket in Europe…
Question
Options
- ACreate a Cloud Storage bucket to store your logs in the EUROPE-WEST1 region. Modify your
- BConfigure your Compute Engine instances to use the Google Cloud's operations suite Cloud
- CUse a Pub/Sub topic to forward your application logs to a Cloud Storage bucket in the EUROPE-
- DConfigure a custom retention policy of 12 years on your Google Cloud's operations suite log
How the community answered
(23 responses)- A4% (1)
- B83% (19)
- C9% (2)
- D4% (1)
Why each option
To meet the 12-year log retention and European data residency requirements with minimal overhead and cost-effectiveness for Compute Engine application logs, you should configure Google Cloud's operations suite (Cloud Logging) to route logs to a Cloud Storage bucket in Europe with a custom retention policy.
While creating a Cloud Storage bucket in `europe-west1` is correct for data residency, modifying your application to directly upload logs is not the most cost-effective or low-overhead approach compared to using Cloud Logging's built-in log routing.
Google Cloud's operations suite (Cloud Logging) is the native, cost-effective solution for collecting and managing application logs from Compute Engine instances. It provides features to define log sinks to Cloud Storage buckets, allowing you to specify a European region (e.g., `europe-west1`) for data residency and configure a 12-year retention policy on the bucket itself using Object Lifecycle Management or by setting a bucket-level retention policy. This minimizes operational overhead compared to custom solutions.
Using Pub/Sub to forward logs to Cloud Storage adds unnecessary complexity and overhead compared to the integrated Cloud Logging solution for application logs.
While Cloud Logging supports custom retention, the 12-year retention period is typically managed on the *destination* storage (like Cloud Storage) rather than directly on the Cloud Logging service's default retention which is shorter. The most cost-effective long-term archival with custom retention is Cloud Storage.
Concept tested: Cloud Logging for long-term log retention and data residency
Source: https://cloud.google.com/logging/docs/routing/overview
Topics
Community Discussion
No community discussion yet for this question.