Cloud-Native Monitoring Solutions CSE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A startup is building a microservices application on AWS and wants to monitor for security anomalies such as unusual API call patterns and potential credential misuse. They need a solution that collects metrics and logs from multiple services and provides built-in anomaly detection. Which cloud-native approach should they choose?

   • AEnable VPC Flow Logs and use CloudWatch Logs Insights to detect unusual API patterns.
   • BUse AWS Trusted Advisor to monitor for security best practices and set up CloudWatch alarms on its checks.
   • CUse Amazon GuardDuty for anomaly detection and enable AWS CloudTrail for API logging, with CloudWatch for metrics and alarms.
   • DUse AWS Config to track resource changes and rely on its default rules to detect credential misuse.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A security team wants to detect a distributed denial-of-service (DDoS) attack on their web application. They need to monitor network traffic patterns and also track the application's response times. Which combination of data types should they analyze?

   • AMetrics only
   • BTraces only
   • CLogs and events only
   • DMetrics and traces
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which characteristic is typical of cloud-native monitoring solutions?

   • AThey only monitor virtual machines and not other cloud services
   • BThey require on-premises hardware to operate
   • CThey provide a single static dashboard that cannot be customized
   • DThey are tightly integrated with cloud provider services and APIs
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   An organization uses Azure and needs to detect when a user signs in from a new location and then accesses a high-value storage account. The security team wants a single service to collect the relevant logs, create a custom alert for this sequence, and trigger an automated response. Which Azure service should they use?

   • AAzure Policy
   • BMicrosoft Defender for Cloud
   • CAzure Sentinel
   • DAzure Monitor
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A security operations center (SOC) is overwhelmed by alert notifications. They want to ensure that only actionable alerts are sent to the on-call engineer, while lower-priority alerts are stored for daily review. What should they configure in their cloud-native monitoring tool?

   • ASet all alerts to the same severity level
   • BCreate a single notification channel for all alerts
   • CDefine severity levels and route high-severity alerts to the on-call channel
   • DDisable alerting and rely on manual dashboard review
   Reveal Solution Discussion Select an answer first