Question 129 of 318
Choose 2You are tasked with exporting and auditing security logs for login activity events for Google Cloud console and API calls that modify configurations to Google
Cloud resources. Your export must meet the following requirements:
✑ Export related logs for all projects in the Google Cloud organization.
✑ Export logs in near real-time to an external SIEM.
What should you do? (Choose two.)
✑ Export related logs for all projects in the Google Cloud organization.
✑ Export logs in near real-time to an external SIEM.
What should you do? (Choose two.)
ACreate a Log Sink at the organization level with a Pub/Sub destination.
✓BCreate a Log Sink at the organization level with the includeChildren parameter, and set the destination to a Pub/Sub topic.
✓CEnable Data Access audit logs at the organization level to apply to all projects.
DEnable Google Workspace audit logs to be shared with Google Cloud in the Admin Console.
EEnsure that the SIEM processes the AuthenticationInfo field in the audit log entry to gather identity information.
✓
Correct Answer: B, C
Create a Log Sink at the organization level with the includeChildren parameter, and set the destination to a Pub/Sub topic.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.