Which statement about Google SecOps parser extensions is correct?

AYou can attach multiple parser extensions to the same log type

BYou can mix no-code and code-snippet steps in one parser extension

CYou can have one parser extension per log type, and a single extension cannot mix no-code and code-snippet approaches

DParser extensions work even if no active parser exists for the log type

Related Questions

A security engineering team has a custom application that must send telemetry directly into Google S...

easy

What is the purpose of a parser extension in Google SecOps?...

easy

Before validating a parser extension, what prerequisite must be met?...

medium

A team creates a parser extension today and expects six months of previously ingested raw logs to be...

medium

A parser extension extracts a value that does not fit any standard UDM field. Where should the engin...

hard

View all Data management questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.