Professional Cloud Security Engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
A security operations team is designing a centralized telemetry analysis architecture in Google Cloud to investigate suspicious network events. VPC Flow Logs, Cloud Next Generation Firewall (Cloud NGFW) logs, and Cloud IDS events are aggregated into a central user-defined Cloud Logging bucket named sec-network-logs-bucket located in us-central1.
The team has the following requirements:
Which sequence of actions should the security engineer take to meet these requirements?
Log Analytics enhances Google Cloud Logging buckets by enabling the execution of BigQuery-standard SQL queries directly over ingested log entries. By creating a linked BigQuery dataset using gcloud logging links create, Cloud Logging exposes the bucket's log views (such as _AllLogs) as read-only views within BigQuery without replicating, moving, or double-billing for the stored log entries.
StudyCerts
StudyCertsgcloud logging buckets update ... --enable-analytics upgrades the log bucket in place, allowing security analysts to use BigQuery-standard SQL directly against structured network telemetry.gcloud logging links create) allows tools like Looker Studio, BigQuery Studio, and external SIEM connectors to query the log views as native BigQuery datasets.conditionSql) that execute scheduled analytical queries to detect multi-event network traffic anomalies.REGEXP_EXTRACT), and joins across log views.Upgrading the existing bucket to use Log Analytics and creating a linked dataset directly addresses all operational, visualization, and alerting requirements within Google Cloud's native observability architecture.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.