A team uses multiple monitoring tools: Prometheus for metrics, ELK for logs, and a separate tool for security alerts. They want to reduce tool sprawl and have a single pane of glass for all monitoring data. Which approach is most effective?

Create a custom dashboard that pulls data from each tool via APIs

Replace all tools with a single logging tool

Continue using the existing tools and manually correlate data

Use a SIEM platform that ingests metrics, logs, and security alerts from all sources

A large enterprise uses a centralized SIEM to collect logs from multiple sources. They are experiencing alert fatigue because the SIEM generates too many low-priority alerts. The security team wants to reduce noise while ensuring critical alerts are not missed. Which strategy is most effective?

Route all alerts to a single email distribution list.

Disable alerts from less critical log sources.

Increase the severity threshold for all alerts to reduce the number generated.

Implement alert correlation rules that group related events and suppress duplicate alerts.

EC-CouncilDevSecOps Essentials

Domain 3Objective 6

Continuous Monitoring Tools DSE Practice Questions (Page 10)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

Questions 46–48

46application · medium
A DevSecOps team deploys a microservices application on Kubernetes. They need to centralize logs from all pods, correlate them with application metrics, and trigger alerts when error rates spike. The team already uses Prometheus for metrics and Alertmanager for notifications. Which tool should they add to meet the requirement?
Select an answer first
47application · medium
A team uses multiple monitoring tools: Prometheus for metrics, ELK for logs, and a separate tool for security alerts. They want to reduce tool sprawl and have a single pane of glass for all monitoring data. Which approach is most effective?
Select an answer first
48expert · hard
A large enterprise uses a centralized SIEM to collect logs from multiple sources. They are experiencing alert fatigue because the SIEM generates too many low-priority alerts. The security team wants to reduce noise while ensuring critical alerts are not missed. Which strategy is most effective?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Continuous Monitoring Tools DSE Practice Questions (Page 10)

Questions 46–48

A team uses multiple monitoring tools: Prometheus for metrics, ELK for logs, and a separate tool for security alerts. They want to reduce tool sprawl and have a single pane of glass for all monitoring data. Which approach is most effective?

A large enterprise uses a centralized SIEM to collect logs from multiple sources. They are experiencing alert fatigue because the SIEM generates too many low-priority alerts. The security team wants to reduce noise while ensuring critical alerts are not missed. Which strategy is most effective?

Keep studying — DevSecOps Toolchain