A regulation requires duplicating specific application logs from your project to a security-team project restricted to the security team. What should you do?

Creating user-defined log buckets in the security team's project and configuring a Cloud Logging sink is the correct approach. Sinks allow you to route specific log entries from one project to a designated destination, such as a log bucket in another project, based on filters. This directly addresses the requirement to duplicate specific application logs to a restricted security team project. The other options are incorrect because: Copying logs from the Required log bucket is not feasible as this bucket is for audit logs and cannot be directly modified or copied from in this manner for application logs. Modifying Default log bucket sink rules would affect all logs and not allow for selective duplication to another project while maintaining the original logs. Copying System Event logs from Required is incorrect as the requirement is for application logs, not system events, and the Required bucket is not the source for general application logs.