Continuous Monitoring Tools DSE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A DevSecOps team wants to automatically block a deployment if a critical vulnerability is detected in the container image during the build stage. Which integration approach should they use?

   • ASet up a monitoring dashboard that displays vulnerability scan results
   • BConfigure the CI/CD pipeline to run a vulnerability scanner and fail the build on critical findings
   • CSend an email alert to the security team after deployment
   • DSchedule a nightly vulnerability scan of the registry
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the role of Prometheus in a DevSecOps monitoring stack?

   • AAutomating deployment pipelines
   • BManaging container orchestration
   • CCollecting and storing time-series metrics
   • DPerforming static code analysis
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a common way to integrate monitoring data into a CI/CD pipeline?

   • AUsing email reports to inform developers
   • BManually checking dashboards before each release
   • CStoring monitoring data in a separate database
   • DUsing webhooks to send alerts to the pipeline
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A DevOps team wants to implement continuous monitoring for a serverless application. They need to collect logs and metrics from AWS Lambda functions, but they have limited budget and want to avoid managing additional infrastructure. Which monitoring approach is most suitable?

   • AUse the cloud provider's native monitoring service (e.g., CloudWatch) to collect Lambda logs and metrics, and set up alarms
   • BUse a third-party APM tool that requires installing an agent on each Lambda function
   • CMonitor only the API Gateway logs and ignore Lambda logs
   • DDeploy a self-managed ELK stack on EC2 instances to collect Lambda logs
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services company must demonstrate to an auditor that access to production systems is monitored and that all administrative actions are logged. They use AWS CloudTrail for API activity and Amazon GuardDuty for threat detection. What additional configuration is necessary to meet the audit requirement?

   • AEnable CloudTrail log file validation and deliver logs to an immutable S3 bucket with versioning enabled.
   • BIncrease the CloudTrail trail's multi-region setting to include all regions.
   • CConfigure GuardDuty to send findings to a Slack channel.
   • DCreate an IAM role that allows auditors to read the logs.
   Reveal Solution Discussion Select an answer first