Correct Answer: Customer-Managed Encryption Keys (CMEK) for Cloud Logging
Cloud Logging supports CMEK, allowing you to use your own keys (potentially backed by Cloud HSM or EKM) to encrypt log data stored in the log buckets....
Correct Answer
Customer-Managed Encryption Keys (CMEK) for Cloud Logging
Why This Answer Is Correct
Cloud Logging supports CMEK, allowing you to use your own keys (potentially backed by Cloud HSM or EKM) to encrypt log data stored in the log buckets.
This question evaluates your knowledge of Google Cloud Observability — a core concept tested in Professional Cloud Architect. Understanding Google Cloud Observability is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your company is audit-heavy and needs to track every single configuration change made to any resource in the Google Cloud organization over the last 10 years. What is the most efficient way to achieve this?
Your team is adopting SRE principles and wants to define an 'Error Budget' for a critical service. Which metric is necessary to calculate this?
You are designing a high-throughput data ingestion pipeline for log files. The logs must be stored for 7 days for real-time analysis in BigQuery and then archived to Cloud Storage for long-term compliance. Which architecture is best?
An organization wants to automate the identification and classification of PII in their BigQuery tables. They want a periodic report of sensitive columns. Which service provides this functionality natively?
What is the primary log type you should enable to meet FedRAMP high compliance in GCP for tracking internal system changes by Google personnel?