Professional Cloud Security Engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An enterprise organization wants to centralize Data Access audit logs generated across all child projects within a folder named Production into a dedicated project named sec-ops-logging. The security team must satisfy the following architectural and operational requirements:
StudyCerts
StudyCertsProduction folder must automatically route to the central destination._Default log buckets._Required log bucket within each local originating project.Which sink configuration should the security engineer implement to achieve this goal?
An intercepting aggregated sink is a Cloud Logging configuration deployed at a parent folder or organization level that collates log entries from child resources while altering standard log routing inheritance.
--include-children): Applying the sink at the Production folder level with --include-children guarantees that log entries from all existing and newly created descendant folders and projects are automatically evaluated and routed.--intercept-children): When a log entry matches the filter of an intercepting sink, the Log Router halts downward propagation. The log entry is delivered to the designated central sink destination and is prevented from flowing down to child resource sinks—specifically bypassing project-level custom sinks and the child project's _Default sink._Required sink in the originating project. This ensures critical Admin Activity and system events remain locally accessible.sec-ops-logging), where destination sinks can subsequently reroute entries into specific log buckets or BigQuery datasets._Default buckets.Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.