Continuous Monitoring Tools DSE Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A team notices that their alerting system generates too many false positives, causing alert fatigue. They want to reduce noise while still detecting real issues. Which approach is most effective?

   • ASend alerts to more people to ensure someone notices
   • BIncrease the severity level of all alerts
   • CAdjust alert thresholds based on historical baseline data and add context to alerts
   • DDisable all alerts and rely on manual monitoring
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A healthcare organization must retain audit logs for at least seven years and ensure they cannot be altered. They use a centralized logging platform. Which configuration best meets the compliance requirement?

   • AStore logs in the logging platform's default index with a one-year retention period.
   • BCompress logs and store them on a standard file server.
   • CEnable log forwarding to an immutable storage solution (e.g., S3 Object Lock or WORM storage) with a retention policy of seven years.
   • DAllow administrators to delete logs after manual review.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Why is continuous monitoring important in a DevSecOps pipeline?

   • AIt ensures that all security vulnerabilities are automatically patched
   • BIt eliminates the need for security testing in the development phase
   • CIt provides a one-time security assessment before deployment
   • DIt allows teams to detect and respond to security and operational issues in real time
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A multinational company must comply with data residency regulations that require personal data to remain within the country of origin. They use a global SIEM that replicates logs to multiple regions. How should they configure log storage to meet compliance?

   • AConfigure the SIEM to store logs in a region within the country of origin and disable cross-region replication for those logs
   • BStore logs only in the cloud provider's headquarters region
   • CEncrypt logs and store them in any region
   • DStore logs in the nearest available region regardless of country
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A startup uses a cloud-native stack with Kubernetes. They want to monitor both infrastructure metrics (CPU, memory) and application-level metrics (request latency, error rates) in a single dashboard. Which tool combination is most appropriate?

   • ANagios for monitoring and Cacti for graphing
   • BSplunk for log management and its built-in dashboards
   • CELK Stack for log aggregation and Kibana for dashboards
   • DPrometheus for metric collection and Grafana for dashboards
   Reveal Solution Discussion Select an answer first