Bird
0
0

Which of the following is the correct filter syntax to capture Admin Activity audit logs in a sink?

easy📝 Syntax Q3 of 15
GCP - Cloud IAM Advanced
Which of the following is the correct filter syntax to capture Admin Activity audit logs in a sink?
AlogName="projects/my-project/logs/cloudaudit.googleapis.com%2Factivity"
BlogName=projects/my-project/logs/cloudaudit.googleapis.com%2Fdata_access
Cresource.type="gce_instance"
Dseverity=ERROR
Step-by-Step Solution
Solution:

  1. Step 1: Understand Admin Activity log filter

    Admin Activity logs use the log name ending with 'cloudaudit.googleapis.com%2Factivity'.

  2. Step 2: Match correct syntax

    logName="projects/my-project/logs/cloudaudit.googleapis.com%2Factivity" correctly uses quotes and the encoded slash for the activity log.

  3. Final Answer:

    logName="projects/my-project/logs/cloudaudit.googleapis.com%2Factivity" -> Option A

  4. Quick Check:

    Admin Activity log filter = logName="projects/my-project/logs/cloudaudit.googleapis.com%2Factivity" [OK]
Quick Trick: Use encoded slash %2F in logName filters [OK]
Common Mistakes:
  • Missing quotes around logName value
  • Using wrong log type in filter
  • Confusing resource type with log name

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More GCP Quizzes
Cloud Firestore and Bigtable - Firestore queries and indexes - Quiz 3easy Cloud Firestore and Bigtable - Firestore queries and indexes - Quiz 7medium Cloud IAM Advanced - VPC Service Controls - Quiz 1easy Cloud Monitoring and Logging - Why observability matters - Quiz 11easy Cloud Pub/Sub - Message ordering - Quiz 4medium Cloud Pub/Sub - Topics and subscriptions - Quiz 3easy Cloud Pub/Sub - Pub/Sub with Cloud Functions integration - Quiz 12easy Cloud Run - Revision management - Quiz 15hard Cloud SQL and Databases - Creating a Cloud SQL instance - Quiz 1easy Cloud SQL and Databases - Read replicas - Quiz 9hard