4.2 Managing and Analyzing Logs PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A DevOps engineer needs to archive logs for 10 years. The logs are accessed rarely, but when accessed, they must be available within 24 hours. They want to minimize storage costs. Which Cloud Storage class should they use?

   • ANearline
   • BArchive
   • CColdline
   • DStandard
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Where is the retention period for logs stored in a Cloud Logging bucket configured?

   • AIn the Logs Explorer settings
   • BIn the log sink configuration
   • CIn the alerting policy
   • DIn the log bucket settings
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A DevOps engineer needs to archive logs for 10 years at the lowest cost. The logs are rarely accessed but must be available for occasional compliance audits. Which sink destination and lifecycle policy should they use?

   • ACloud Logging's default storage with a retention of 10 years
   • BBigQuery with a table expiration of 10 years
   • CPub/Sub with a subscription that writes to Cloud Storage
   • DCloud Storage with a lifecycle policy to transition to Archive class after 30 days
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A DevOps engineer is investigating a security incident and needs to search logs for a specific user's email address. However, the logs have been redacted to remove PII. What should they do?

   • ASearch for the email address in the original logs before redaction.
   • BUse Gemini Cloud Assist to find the email address in the redacted logs.
   • CUse a log processor to unredact the email address for the investigation.
   • DUse Cloud DLP to re-identify the email address.
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A company needs to stream logs to a SIEM in real-time, but the logs contain PHI that must be redacted before leaving the cloud. They have a log processor that can redact PHI. What is the best approach?

   • AUse Cloud DLP to redact the data in Pub/Sub before the SIEM consumes it.
   • BCreate a second sink to BigQuery and redact there.
   • CModify the application to stop logging PHI.
   • DApply the log processor to the sink that exports to Pub/Sub.
   Reveal Solution Discussion Select an answer first