GSEC · Question #277
Which data format is shown in the following log entry?
The correct answer is A. JSON. The question tests recognition of JSON as a structured log data format based on its characteristic syntax of curly braces, key-value pairs, and quoted strings.
Question
Which data format is shown in the following log entry?
Options
- AJSON
- BXML
- CCEF
- DLEEF
How the community answered
(25 responses)- A76% (19)
- B4% (1)
- C12% (3)
- D8% (2)
Why each option
The question tests recognition of JSON as a structured log data format based on its characteristic syntax of curly braces, key-value pairs, and quoted strings.
JSON (JavaScript Object Notation) is identifiable by its use of curly braces for objects, square brackets for arrays, colon-separated key-value pairs, and double-quoted string keys. Log entries formatted in JSON are widely used in modern SIEMs and logging pipelines because they are human-readable and machine-parseable. These structural markers distinguish JSON from all other common log formats.
XML uses angle-bracket tags and nested element structures, not curly braces or key-value pairs.
CEF (Common Event Format) is a pipe-delimited plaintext format developed by ArcSight, with a fixed header and extension fields, not JSON syntax.
LEEF (Log Event Extended Format) is a tab-delimited format developed by IBM for QRadar ingestion, not a brace-based key-value structure.
Concept tested: Identifying JSON structured log format
Source: https://www.json.org/json-en.html
Topics
Community Discussion
No community discussion yet for this question.