Google Cloud Professional Cloud Security Engineer Practice Exam

Which solution allows you to centralize logs from production projects for analysis in Google Cloud?

1. Create an aggregate org sink at the parent folder of the production projects

2. Enable Stackdriver Monitoring for all projects

3. Utilize Pub/Sub for logging events

4. Implement a third-party logging service

The correct answer is: Create an aggregate org sink at the parent folder of the production projects

The solution of creating an aggregate organization sink at the parent folder of the production projects is effective for centralizing logs from multiple projects within Google Cloud. By establishing an aggregate organization sink, you can collect and export logs from all the production projects that are under the specified folder. This means that logs from various project resources, like Compute Engine instances, Cloud Storage buckets, or Cloud Functions, can be gathered in a centralized repository. This method allows you to analyze and monitor logs from a higher organizational level rather than managing them individually within each project. It simplifies the process of log analysis by providing a singular interface for querying data across all projects, enabling better oversight and compliance tracking across your cloud environment. The other options, while valuable for specific tasks, do not offer the same level of centralized log management. Enabling Stackdriver Monitoring focuses on resource monitoring rather than log aggregation, utilizing Pub/Sub is more tailored towards event-driven architectures and not specifically designed for log centralization, and implementing a third-party logging service may introduce additional complexity without the inherent integration and ease of use provided by Google Cloud's built-in capabilities.