Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 132

Question

You are tasked with exporting and auditing security logs for login activity events for Google Cloud console and API calls that modify configurations to Google Cloud resources. Your export must meet the following requirements: • Export related logs for all projects in the Google Cloud organization. • Export logs in near real-time to an external SIEM. What should you do? (Choose two.)

Accepted Answer

Correct answer: B, D. The correct answer is B, D. Option B: Create a Log Sink at the organization level with the includeChildren parameter, and set the destination to a Pub/Sub topic. Option D: Enable Google Workspace audit logs to be shared with Google Cloud in the Admin Console. Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams. This option meets the real-time / low-latency performance requirement.

Google Cloud Professional Cloud Security Engineer PCSE — Question 132