Ultimate access to all questions.
As a member of the SRE team at your company, you're tasked with fulfilling a new compliance requirement to retain logs of operations in Compute Engine that read user-provided data in the Production project for two years. Which two actions should you take?
Explanation:
Option B is correct because creating a new Logs Bucket with the desired retention and a Sink to collate the specified logs, using the inclusion filter of the _Default Sink, captures the specified logs. Option D is correct because the Data Read audit log of the Compute Engine needs to be enabled to meet the compliance requirement. Option A is incorrect as the Data Write audit log does not meet the criteria. Option C is incorrect because the _Required Logs Bucket cannot be edited. Option E is incorrect as the _Required Logs Sink inclusion filters do not capture the specified logs.