Google Cloud Professional Cloud Security Engineer Practice Exam

What is the primary purpose of creating a log sink at the organization level in Google Cloud?

1. To establish a uniform logging strategy across all child resources

2. To store logs for long-term archival in a separate system

3. To optimize the performance of logging systems

4. To allow for automatic log deletion after a set period

The correct answer is: To establish a uniform logging strategy across all child resources

Creating a log sink at the organization level in Google Cloud serves the primary purpose of establishing a uniform logging strategy across all child resources. By implementing the log sink at this broader level, it ensures that logs from all projects and resources under the organization are directed to a centralized destination, such as a cloud storage bucket, BigQuery dataset, or Pub/Sub topic. This uniformity not only aids in consistent log management but also simplifies compliance and security monitoring tasks since all relevant logs can be accessed and analyzed from a single source. Having this standardized approach allows security engineers to apply policies effectively across the entire organization, rather than having to configure logging settings individually for each child resource. This practice enhances visibility into the activity across the organization and supports better management and response to security incidents.