Continuous Monitoring Tools DSE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A team deploys a new microservice. They want to ensure that any degradation in performance or availability is detected quickly and that the on-call engineer is notified. Which monitoring setup best achieves this?

   • ASet up synthetic checks that simulate user requests and alert on failures or latency thresholds
   • BRely on users to report issues via a support ticket
   • CMonitor only the underlying infrastructure metrics like CPU and memory
   • DCollect logs and review them manually at the end of each day
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the purpose of an alerting mechanism in a monitoring system?

   • ATo notify relevant personnel when a metric crosses a predefined threshold
   • BTo store historical data for future analysis
   • CTo replace the need for human monitoring
   • DTo automatically fix the underlying issue
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A financial company must prove to auditors that access to production systems is monitored and that all administrative actions are recorded. Which continuous monitoring practice best supports this requirement?

   • AUse configuration management to enforce baseline settings
   • BEnable detailed audit logging on production systems and centralize the logs in a tamper-evident SIEM
   • CConduct quarterly penetration tests on production systems
   • DMonitor network traffic for anomalies and alert on unusual patterns
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security team is investigating a potential data breach. They need to correlate authentication logs, network flow logs, and application logs to trace the attacker's actions. The logs are stored in different systems. What is the most efficient way to perform this investigation?

   • ARequest the cloud provider to provide a unified log view
   • BUse a spreadsheet to combine the logs
   • CIngest all logs into a SIEM and use its correlation engine to link events across sources
   • DManually search each log system separately and piece together the timeline
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company wants to adopt a 'shift-left' security approach. They want to identify security issues as early as possible in the development lifecycle. Which monitoring practice aligns with this goal?

   • ASet up runtime application self-protection (RASP) in production
   • BMonitor production logs for security incidents
   • CConduct penetration testing after each release
   • DIntegrate static application security testing (SAST) and dependency scanning into the CI pipeline
   Reveal Solution Discussion Select an answer first