
Ultimate access to all questions.
Your company operates services on Google Cloud with each team running applications in separate projects. New teams and projects are frequently created. The security team mandates that all logs be processed by a SIEM system, which ingests logs via Pub/Sub. How do you ensure all current and future logs are analyzed by the SIEM?
A
Create an organization-level aggregated sink with a siem log bucket as the destination. Set an inclusion filter to include all logs.
B
Create a folder-level aggregated sink with a siem Pub/Sub topic as the destination. Set an inclusion filter to include all logs. Repeat for each folder.
C
Create an organization-level aggregated sink with a siem Pub/Sub topic as the destination. Set an inclusion filter to include all logs.
D
Create a project-level logging sink with a siem Pub/Sub topic as the destination. Set an inclusion filter to include all logs. Repeat for each project.