Get Your CertGoogle Cloud Associate Cloud EngineerPlayCompete
‹ All Google Cloud Associate Cloud Engineer questions

GCP Associate Cloud Engineer Practice Question 15: Org Aggregated Log Sink

Google Cloud Associate Cloud Engineer · Test 2 · question 5 of 10

Cloud Logginghard

A security team must retain the Admin Activity audit logs of every current and future project in the organization in one central Cloud Storage bucket for seven years. New projects are created every week by many teams, and the security team does not want to touch each project.

What should you do?

Select one answer
Show answer and explanation

Answer:

  • B. Create an aggregated log sink at the organization level with the include-children option, with the central bucket as the destination

An aggregated sink is created on an organization (or folder) and, with --include-children, exports matching log entries from all projects below it, including projects created later. Give it an inclusion filter for the audit log names and a Cloud Storage bucket destination, and grant the sink's writer identity access to the bucket.

Option A works only until someone forgets a project, which is the manual burden the team wants to avoid. Option C is not possible because the _Required bucket has a fixed 400 day retention that cannot be changed. Option D creates a sink that exports only entries logged at the organization resource itself, not those from child projects.

Reference: Aggregated sinks

Practice Test 2 ›

Study guides for Google Cloud Associate Cloud Engineer

Google Cloud Digital Leader exam: what's on it, who it's forGoogle Cloud Digital Leader: August 2026 exam update, six sections, US$99 price as of November 2026, renewal, study plan and ACE comparison.
Free cloud certifications in 2026: which are really freeWhich free cloud certifications are really free in 2026: Oracle's free OCI exams, and the voucher routes for AWS, Microsoft and Google, with prices.
Which cloud certification is best? AWS vs Azure vs GoogleWhich cloud certification is best for a beginner? AWS Cloud Practitioner, AZ-900 and Google Cloud Digital Leader compared: cost, format and which first.
Google Cloud certification path: is ACE worth it?Is Google's Associate Cloud Engineer certification worth it? The Google Cloud certification path in 2026, with cost, format and which exam to take first.
GCP IAM roles, service accounts and keyless accessBasic, predefined and custom roles in Google Cloud IAM, how grants inherit down the hierarchy, and how to use service accounts without keys.