A multinational company must comply with GDPR, which requires that personal data of EU citizens be processed in a way that ensures appropriate security. They use a cloud provider with data centers in multiple regions. Which configuration best supports GDPR compliance?

Use a third-party logging service that stores data in the US but encrypts it.

Store all logs in a single global region to simplify management.

Deploy monitoring and logging infrastructure in an EU region and ensure that logs containing personal data are stored and processed only in that region.

Disable logging for all services that process personal data.

A company is migrating from a traditional on-premises monitoring approach (nightly batch log reviews) to a continuous monitoring model. They want to improve security incident detection and response. Which change is most critical to achieve this goal?

Purchase a more expensive SIEM without changing processes

Hire more security analysts to manually review logs

Implement real-time log ingestion and automated alerting on security-relevant events

Increase the frequency of batch log reviews to every hour

A DevSecOps team deploys a microservices application across multiple Kubernetes clusters. They need a centralized view of security-relevant logs from all clusters, with the ability to search across them and trigger alerts on suspicious patterns. The team already uses Prometheus for metrics and Grafana for dashboards. Which tool should they add to meet this requirement?

ELK Stack (Elasticsearch, Logstash, Kibana)

A security team uses the ELK stack (Elasticsearch, Logstash, Kibana) to analyze application logs. They want to detect a brute-force attack pattern where multiple failed logins occur from the same IP address within a short time. Which approach should they implement?

Create an Elasticsearch watcher that runs a query aggregating failed login events by source IP and triggers an alert when the count exceeds a threshold.

Use Kibana's Canvas to manually review login failures.

Enable Elasticsearch's machine learning only if the license includes it.

Configure Logstash to drop all failed login events.

EC-CouncilDevSecOps Essentials

Domain 3Objective 6

Continuous Monitoring Tools DSE Practice Questions (Page 2)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

Questions 6–10

6foundation · easy
Which tool is commonly used for log aggregation and analysis in a DevSecOps toolchain?
Select an answer first
7expert · hard
A multinational company must comply with GDPR, which requires that personal data of EU citizens be processed in a way that ensures appropriate security. They use a cloud provider with data centers in multiple regions. Which configuration best supports GDPR compliance?
Select an answer first
8expert · hard
A company is migrating from a traditional on-premises monitoring approach (nightly batch log reviews) to a continuous monitoring model. They want to improve security incident detection and response. Which change is most critical to achieve this goal?
Select an answer first
9application · medium
A DevSecOps team deploys a microservices application across multiple Kubernetes clusters. They need a centralized view of security-relevant logs from all clusters, with the ability to search across them and trigger alerts on suspicious patterns. The team already uses Prometheus for metrics and Grafana for dashboards. Which tool should they add to meet this requirement?
Select an answer first
10application · medium
A security team uses the ELK stack (Elasticsearch, Logstash, Kibana) to analyze application logs. They want to detect a brute-force attack pattern where multiple failed logins occur from the same IP address within a short time. Which approach should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Continuous Monitoring Tools DSE Practice Questions (Page 2)

Questions 6–10

Which tool is commonly used for log aggregation and analysis in a DevSecOps toolchain?

A multinational company must comply with GDPR, which requires that personal data of EU citizens be processed in a way that ensures appropriate security. They use a cloud provider with data centers in multiple regions. Which configuration best supports GDPR compliance?

A company is migrating from a traditional on-premises monitoring approach (nightly batch log reviews) to a continuous monitoring model. They want to improve security incident detection and response. Which change is most critical to achieve this goal?

A security team uses the ELK stack (Elasticsearch, Logstash, Kibana) to analyze application logs. They want to detect a brute-force attack pattern where multiple failed logins occur from the same IP address within a short time. Which approach should they implement?

Keep studying — DevSecOps Toolchain