Google Cloud Professional Cloud Security Engineer Practice Exam

Where is the best place to export security event logs for retention for 2 years while minimizing costs?

1. Cloud Pub/Sub topics

2. Cloud Bigtable

3. Cloud Storage buckets

4. Cloud Firestore

The correct answer is: Cloud Storage buckets

Exporting security event logs for long-term retention while minimizing costs can be effectively achieved using Cloud Storage buckets. Cloud Storage is designed for durability and scalability, making it an ideal choice for storing large volumes of log data over an extended period, such as two years. The cost-effectiveness of Cloud Storage comes from its various storage classes, which allow users to choose between different tiers based on access patterns. For infrequently accessed data, there are options like Nearline and Coldline storage, which significantly reduce costs compared to more actively accessed tiers. This adaptability makes it feasible to keep security logs for long durations without incurring high expenses. Cloud Pub/Sub is primarily focused on message delivery and real-time data streaming, which would not be suitable for long-term retention as a storage solution. Cloud Bigtable is a NoSQL database optimized for real-time analytics and operational workloads rather than long-term log storage. Meanwhile, Cloud Firestore is a flexible, scalable database for mobile, web, and server development but is not optimized for cost-effective long-term storage of large log datasets. Considering these factors, using Cloud Storage buckets balances both the retention requirement and cost efficiency, making it the best choice for exporting security event logs.