A DevOps engineer needs to ensure that logs exported to BigQuery do not contain user IP addresses. They want to replace IP addresses with a hash. What should they do?

Modify the application to not log IP addresses.

Use Cloud DLP to de-identify the data in BigQuery after export.

Use a log processor to hash the IP address field before export.

Use a BigQuery view to mask the IP address.

A DevOps engineer notices that application logs contain customer email addresses. They need to prevent this PII from being stored in Cloud Logging. What should they do?

Create a sink to export logs to BigQuery and then redact them there.

Use Cloud DLP to inspect and redact logs after they are stored.

Use a log processor to redact email addresses before logs are ingested.

Set a log retention policy to delete logs after 30 days.

A company must redact credit card numbers from logs before they are exported to a third-party SIEM. The logs are currently exported via a sink to Pub/Sub. What is the best approach?

Create a second sink to BigQuery and redact there.

Modify the application to stop logging credit card numbers.

Configure a log processor on the sink to redact the data before it is sent to Pub/Sub.

Use Cloud DLP to redact the data in Pub/Sub before the SIEM consumes it.

Google CloudProfessional Cloud DevOps Engineer

Domain 4Objective 2

4.2 Managing and Analyzing Logs PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 8)

Part of the Section 4: Implementing observability practices and troubleshooting issues domain, which accounts for ~25% of the exam of the PROFESSIONAL-CLOUD-DEVOPS-ENGINEER exam.

40questions here

8free pages

14concepts

~25% of the examof the exam

14 Concepts in This Objective

Logs Explorer navigation
Logging query language basics
Advanced query techniques
Log-based metrics and alerts
Log sinks and routing
Log retention and lifecycle
Exporting logs to BigQuery
Exporting logs to Pub/Sub
Exporting logs to Cloud Storage
Sensitive data identification
Log redaction with processors
Data masking and de-identification
Gemini Cloud Assist for log analysis
Integrating Gemini with Logs Explorer

Questions 36–40

36application · medium
A DevOps engineer needs to ensure that logs exported to BigQuery do not contain user IP addresses. They want to replace IP addresses with a hash. What should they do?
Select an answer first
37foundation · easy
In the Google Cloud console, which interface provides a searchable view of log entries where you can filter by resource, severity, and time range?
Select an answer first
38application · medium
A DevOps engineer notices that application logs contain customer email addresses. They need to prevent this PII from being stored in Cloud Logging. What should they do?
Select an answer first
39application · medium
A company must redact credit card numbers from logs before they are exported to a third-party SIEM. The logs are currently exported via a sink to Pub/Sub. What is the best approach?
Select an answer first
40foundation · easy
Which of the following is a valid destination for a log sink?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PROFESSIONAL-CLOUD-DEVOPS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVOPS-ENGINEER” is a trademark of its owner, used for identification only.

4.2 Managing and Analyzing Logs PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 8)

Questions 36–40

A DevOps engineer needs to ensure that logs exported to BigQuery do not contain user IP addresses. They want to replace IP addresses with a hash. What should they do?

In the Google Cloud console, which interface provides a searchable view of log entries where you can filter by resource, severity, and time range?

A DevOps engineer notices that application logs contain customer email addresses. They need to prevent this PII from being stored in Cloud Logging. What should they do?

A company must redact credit card numbers from logs before they are exported to a third-party SIEM. The logs are currently exported via a sink to Pub/Sub. What is the best approach?

Which of the following is a valid destination for a log sink?

Keep studying — Section 4: Implementing observability practices and troubleshooting issues