Professional Security Operations EngineerDemo

By Google · Question Mode

QuestionQ3

Data management

You work for a telecommunications company that needs to monitor logs from its multi-region 5G network in Google Security Operations (SecOps). The logs are currently available only on-premises and reside on standalone network-attached storage (NAS) in four different regions. You need to ingest these logs into Google SecOps and tag each NAS as a distinct log source to prevent IP address aliasing. What should you do?

  • A Configure feed management to pull data from each log's location, and configure a namespace for each log source.
  • B Configure feed management to pull data from each log's location, and configure an ingestion label for each log source.
  • C Configure a Bindplane agent that collects Syslog from each log's location, and configure a namespace for each log source.
  • D Configure a Bindplane agent that collects Syslog from each log's location and configure an ingestion label for each log source.
Explanation

Bindplane agents collect and send on-premises telemetry, including Syslog, to Google SecOps. A namespace identifies assets from separate network environments and deconflicts overlapping IP addresses; ingestion labels instead provide metadata for identifying or filtering log streams.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!