Questions

 

What is the name of the Bindplane processor that will properly format and tag logs for Google SecOps?

 

• Google SecOps Standardization Processor
• Otel Schema Formatted Processor
• Google SecOps Output Processor
• Bindplane Standardization Processor

 

 

When data is ingested into Google SecOps, when is the raw data discarded?

 

• Raw data is never retained in Google SecOps, only data successfully parsed into the UDM schema.
• If the data is ingested, the raw data is always retained even if parsing fails.
• If parsing fails then the raw data will also be discarded.
• If the parser for the data type indicates that the log should be dropped, it will be discarded.

 

 

Google SecOps has provided a forwarder docker image for several years. The Chronicle forwarder is being replaced by what Otel based forwarder?

 

• SyslogNG
• Bindplane
• Prometheus
• NXLog

 

 

When configuring Bindplane to send Windows Logs to Google SecOps, in addition to the log channels which of these configurations are required?

 

• Disk Queue
• IAP Proxy
• Bindplane Gateway
• Raw Logs

 

 

Google SecOps supports ingestion through HTTP(s) streaming services. What are examples of data sources that can be sent to the HTTP(s) streaming services?

 

• Syslog over TLS
• Log4j
• PCAP raw
• Amazon Firehose

 

 

When considering ingest options for transporting data into Google SecOps, which of the following is the best choice?

 

• Cloud Storage object
• Direct to Ingestion API
• Third party (3P) data feeds
• Syslog over TLS