Hard1 markMultiple Choice
Domain 3.2: Deploying and implementing GKE resourcesDomain 3.2GKECloud LoggingMonitoring

GCP ACE · Question 24 · Domain 3.2: Deploying and implementing GKE resources

You are configuring a new GKE Standard cluster. Your security team requires that all logs from the Kubernetes control plane (API server, scheduler) and all logs from the application containers running in the pods are sent to Cloud Logging.

Which TWO logging components must be enabled in the cluster configuration? (Select TWO)

Answer options:

A.

System logging

B.

Audit logging

C.

Workload logging

D.

VPC Flow Logs

E.

Cloud Trace

How to approach this question

Identify the specific GKE logging categories in Cloud Operations (formerly Stackdriver).

Full Answer

In GKE, Cloud Logging integration is divided into categories. 'System logging' captures logs from the Kubernetes control plane and node services. 'Workload logging' captures the logs generated by your containerized applications (stdout/stderr from pods). Both must be enabled to meet the requirement.

Common mistakes

Selecting Audit logging, which is for tracking API calls (who did what), not for capturing application output.

Practice the full GCP Associate Cloud Engineer Practice Exam 3

50 questions · hints · full answers · grading

More questions from this exam