SecureTech Solutions, a managed security service provider (MSSP), is optimizing its log management architecture to enhance log storage, retrieval, and analysis efficiency. The SOC team needs logs…

Question

Options

• AComma-Separated Values (CSV) format
• BCloud storage
• CSyslog format
• DDatabase

• A
  90% (37)
• B
  2% (1)
• C
  5% (2)
• D
  2% (1)

Explanation

CSV is a structured, tabular text format where each record is a row and fields are separated by commas, making it easy to parse, import into spreadsheets, and export into databases. The scenario specifically calls for a text file with rows and columns, readability, and easy export to databases or spreadsheet-based analysis-these are classic CSV strengths. Cloud storage is a storage location/architecture, not a log format. Syslog is a transport and message format family used for sending event messages from systems and network devices; it is often semi-structured but not inherently “rows and columns” in a tabular file structure. A database is a storage system rather than a file format; while logs can be stored in databases, the question asks specifically for a text file format. In SOC practice, CSV is commonly used for exporting specific datasets for reporting, offline analysis, and sharing with stakeholders, especially when interoperability is needed. For high-scale SIEM ingestion, formats like JSON are often preferred, but given the explicit requirement for a tabular text file compatible with spreadsheets, CSV is the correct choice.

No community discussion yet for this question.