PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #291: Real Exam Question with Answer & Explanation

Question

You work for a multinational organization that has systems deployed across multiple cloud providers, including Google Cloud. Your organization maintains an extensive on-premises security information and event management (SIEM) system. New security compliance regulations require that relevant Google Cloud logs be integrated seamlessly with the existing SIEM to provide a unified view of security events. You need to implement a solution that exports Google Cloud logs to your on-premises SIEM by using a push-based, near real-time approach. You must prioritize fault tolerance, security, and auto scaling capabilities. In particular, you must ensure that if a log delivery fails, logs are re-sent. What should you do?

Options

• ACreate a Pub/Sub topic for log aggregation. Write a custom Python script on a Cloud Function
• BCollect all logs into an organization-level aggregated log sink and send the logs to a Pub/Sub
• CDeploy a Cloud Logging sink with a filter that routes all logs directly to a syslog endpoint. The
• DUtilize custom firewall rules to allow your SIEM to directly query Google Cloud logs. Implement a