PCDOE Question 38

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Correct Answer: C Why C is the best solution: Create an advanced log filter matching userinfo* → This identifies the PII logs accurately. Configure a log export (sink) to Cloud Storage → This securely captures the sensitive logs in a dedicated, controlled location for later review (e.g., security/compliance team). Configure a log exclusion with the same filter → This prevents the PII logs from being stored in the default _Default log bucket in Cloud Logging, stopping the leakage. This is the standard, recommended Google Cloud Logging pattern for handling sensitive data (PII) in logs.

• Chose C1

  ✅ Log export (sink): Captures userinfo logs to Cloud Storage (secure review) ✅ Log exclusion: Prevents userinfo logs from being stored in Stackdriver ✅ Two-step process works together: Export filter sends PII logs to Cloud Storage Exclusion filter prevents same logs from staying in Stackdriver ✅ Uses native GCP logging features ✅ Meets both requirements perfectly ✅ No custom development needed

• Chose C1

  It should be C. 1. Sink (Include): Create a high-priority sink to export logs matching userinfo to a private Cloud Storage bucket. 2. Exclusion Filter (Exclude): Create an exclusion filter to drop logs matching userinfo from all Cloud Logging storage buckets.