An organization wants to monitor all administrative actions across their entire GCP Organization, including changes to IAM policies and project deletions. They want to route all these logs to a central security project for long-term analysis in BigQuery. What should they create?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Organization-level Log Sink

An organization-level aggregated sink captures logs from every project within the organization (and its folders) and routes them to a single destination like a BigQuery dataset or ...

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioGoogle Cloud Observability

An organization wants to monitor all administrative actions across their entire GCP Organization, including changes to IAM policies and project deletions. They want to route all these logs to a central security project for long-term analysis in BigQuery. What should they create?

โœ“ Correct Answer & ExplanationGoogle Cloud Observability

Correct Answer

Organization-level Log Sink

Why This Answer Is Correct

An organization-level aggregated sink captures logs from every project within the organization (and its folders) and routes them to a single destination like a BigQuery dataset or a GCS bucket.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Google Cloud Observability โ€” a core concept tested in Professional Cloud Architect. Understanding Google Cloud Observability is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.