🔥 40% Off Crucial Exams Memberships — Deal ends today!

2 hours, 30 minutes remaining!
Crucial Exams

GCP Professional Cloud Architect Practice Question

Your organization operates multiple Google Cloud projects hosting GKE clusters, Cloud Run services, and several Compute Engine workloads. Compliance mandates that all Admin Activity and Data Access audit logs be retained for 24 months in a single location, and that security operations receive an alert within minutes whenever a project-level IAM role binding is modified. You want to keep operational effort and storage costs low. Which logging architecture best satisfies these requirements?

  • Create an aggregated sink that routes all projects' audit logs to a centralized Cloud Logging bucket with a 730-day retention policy; define a logs-based metric that matches iam.policy changes and an alerting policy on that metric.

  • Install the Ops Agent on every VM and configure it to publish logs to Pub/Sub; trigger a Dataflow job that archives messages in a Cloud Storage bucket with a 730-day lifecycle rule, and invoke Cloud Functions to detect role binding changes and raise alerts.

  • Configure a log sink in every project that writes audit logs to its own Cloud Storage Nearline bucket with a 730-day retention rule; rely on Cloud Audit Logs email notifications to inform security when IAM role bindings change.

  • Stream all audit logs from each project to a shared BigQuery dataset using export sinks; set partition expiration to 730 days and run scheduled queries that write findings to Cloud Monitoring for alerting.

GCP Professional Cloud Architect
Ensuring solution and operations excellence
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot