Cloud Monitoring, Logging & Observability Flashcards

A GKE cluster's application logs are not appearing in Cloud Logging. Which component is responsible for forwarding container logs from GKE nodes to Cloud Logging?

Answer: Fluentd / Fluent Bit DaemonSet

GKE uses a Fluent Bit (or Fluentd) DaemonSet on each node to collect container stdout/stderr logs and forward them to Cloud Logging.

What is a Service Level Objective (SLO) in the context of Cloud Monitoring?

Answer: A measurable reliability target for a service, tracked as a percentage over a time window

An SLO is an internal reliability target (e.g., 99.9% request success rate over 30 days) that you define and monitor in Cloud Monitoring to measure service health.

You need to store logs from a Cloud Run service for 2 years to meet compliance requirements. What is the most cost-effective approach?

Answer: Create a log sink to export logs to a Cloud Storage bucket with a lifecycle policy

Exporting logs to Cloud Storage via a sink is the most cost-effective long-term archival solution; Cloud Storage costs less per GB than Cloud Logging for extended retention periods.

Which field in a Cloud Logging log entry indicates the source GCP resource that generated the log, such as a specific Compute Engine VM or Cloud Run revision?

Answer: resource

The 'resource' field in a log entry contains a MonitoredResource object that identifies the type and labels of the GCP resource that generated the log entry.

A cloud engineer must ensure that VPC Flow Logs are enabled for a subnet to analyze network traffic. Where is this setting configured?

Answer: On the subnet resource in the VPC network configuration

VPC Flow Logs are enabled per-subnet in the VPC network configuration; when enabled, they capture a sample of network flows to and from VM instances in that subnet.

You want to be alerted when any user in your GCP project deletes a Cloud Storage bucket. Which Cloud Logging feature combined with Cloud Monitoring would best accomplish this?

Answer: Create a log-based metric on Admin Activity Audit Logs and configure an alerting policy

Admin Activity Audit Logs record bucket deletion events; creating a log-based metric filtered to those events lets you build a Cloud Monitoring alerting policy to send notifications.

Which Cloud Monitoring workspace concept allows a single pane of glass for monitoring resources across multiple GCP projects?

Answer: Scoping project (metrics scope)

A scoping project (formerly called a Workspace) defines a metrics scope that can include metrics from multiple GCP projects, enabling centralized monitoring in a single Cloud Monitoring view.