An operations team uses Prometheus to monitor a web application. They want to alert when the 95th percentile of request latency exceeds 500 milliseconds for at least 5 minutes. Which Prometheus alerting rule expression correctly implements this requirement?

rate(http_request_duration_seconds_sum[5m]) / rate(http_request_duration_seconds_count[5m]) > 0.5

histogram_quantile(0.95, sum(rate(http_request_duration_seconds_bucket[5m])) by (le)) > 0.5

avg(http_request_duration_seconds_sum[5m]) > 0.5

max(http_request_duration_seconds_bucket[5m]) > 0.5

A DevOps team uses Prometheus to monitor a service. They notice that alerts are not firing when the service becomes slow, but they do fire when it is completely down. The team suspects the issue is with how they measure latency. Which change would most likely improve alert accuracy?

Increase the alerting rule's evaluation interval from 1 minute to 5 minutes.

Use the count of requests instead of latency in the alert rule.

Switch from using average latency to using a high percentile (e.g., 95th or 99th) in the alerting rule.

Set the alert threshold to a lower value, such as 100ms.

A DevOps team uses Grafana with Prometheus to monitor a Kubernetes cluster. They want to receive an alert when the CPU usage of any pod exceeds 80% for 10 minutes. Which alerting mechanism should they configure?

Create a Grafana dashboard panel with a threshold and enable 'Alert' on that panel.

Use Kubernetes liveness probes to restart the pod when CPU is high.

Define a Prometheus alerting rule that queries the metric and route it through Alertmanager to send notifications.

Configure the Kubernetes Horizontal Pod Autoscaler to scale based on CPU.

A DevOps team is implementing continuous monitoring for a new microservices application. They need to choose between using a single centralized monitoring stack or per-team monitoring tools. The company values consistency and wants to avoid tool sprawl. Which approach is most aligned with their goals?

Rely on the cloud provider's default monitoring without customization.

Adopt a centralized monitoring platform (e.g., Prometheus + Grafana) and provide guidelines for teams to add their own dashboards.

Let each team choose its own monitoring tools independently.

Use a different monitoring tool for each microservice.

EC-CouncilDevSecOps Essentials

Domain 3Objective 6

Continuous Monitoring Tools DSE Practice Questions (Page 5)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

Questions 21–25

21foundation · easy
What type of data is most important for auditing purposes in a DevSecOps environment?
Select an answer first
22application · medium
An operations team uses Prometheus to monitor a web application. They want to alert when the 95th percentile of request latency exceeds 500 milliseconds for at least 5 minutes. Which Prometheus alerting rule expression correctly implements this requirement?
Select an answer first
23expert · hard
A DevOps team uses Prometheus to monitor a service. They notice that alerts are not firing when the service becomes slow, but they do fire when it is completely down. The team suspects the issue is with how they measure latency. Which change would most likely improve alert accuracy?
Select an answer first
24application · medium
A DevOps team uses Grafana with Prometheus to monitor a Kubernetes cluster. They want to receive an alert when the CPU usage of any pod exceeds 80% for 10 minutes. Which alerting mechanism should they configure?
Select an answer first
25expert · hard
A DevOps team is implementing continuous monitoring for a new microservices application. They need to choose between using a single centralized monitoring stack or per-team monitoring tools. The company values consistency and wants to avoid tool sprawl. Which approach is most aligned with their goals?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Continuous Monitoring Tools DSE Practice Questions (Page 5)

Questions 21–25

What type of data is most important for auditing purposes in a DevSecOps environment?

An operations team uses Prometheus to monitor a web application. They want to alert when the 95th percentile of request latency exceeds 500 milliseconds for at least 5 minutes. Which Prometheus alerting rule expression correctly implements this requirement?

A DevOps team uses Prometheus to monitor a service. They notice that alerts are not firing when the service becomes slow, but they do fire when it is completely down. The team suspects the issue is with how they measure latency. Which change would most likely improve alert accuracy?

A DevOps team uses Grafana with Prometheus to monitor a Kubernetes cluster. They want to receive an alert when the CPU usage of any pod exceeds 80% for 10 minutes. Which alerting mechanism should they configure?

Keep studying — DevSecOps Toolchain