2.1 Ingesting Logs for Security Tooling PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When evaluating a new label for ingested data, what should be considered?

   • AWhether the label is unique across all logs
   • BWhether the label provides useful context for security analysis
   • CWhether the label is automatically generated
   • DWhether the label is short enough to save storage
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the trade-off when reducing log retention periods to save costs?

   • AHigher ingestion costs
   • BReduced ability to investigate historical incidents
   • CIncreased risk of data breaches
   • DSlower search performance
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst is ingesting firewall logs from a vendor that uses a custom log format. They want to use Google SecOps to parse these logs. What should the analyst do first?

   • ANormalize the logs manually in a spreadsheet before ingestion.
   • BCreate a new parser from scratch using the Google SecOps parser editor.
   • CContact Google Support to request a custom parser for the vendor.
   • DCheck the Google SecOps parser list to see if a parser already exists for this vendor and format.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which Google Cloud service is used to configure log ingestion from Google Cloud sources into Google SecOps?

   • ACloud Pub/Sub subscriptions
   • BCloud Logging sinks
   • CCloud Deployment Manager
   • DCloud IAM policies
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which Google Cloud service is commonly used as an intermediary to ingest logs from various sources into Google SecOps?

   • ACloud Logging
   • BCloud Monitoring
   • CCloud Storage
   • DCloud Functions
   Reveal Solution Discussion Select an answer first