A DevSecOps team is integrating logging, monitoring, and alerting for a new application. They have a requirement to provide real-time observability, but they also need to ensure that sensitive data (e.g., passwords, credit card numbers) is not logged. Which approach best meets both requirements?

Disable logging for any request that contains sensitive data.

Store logs in an encrypted database and consider that sufficient protection.

Log all data as-is and rely on the monitoring tool to mask sensitive fields at display time.

Implement log redaction at the application level to remove or mask sensitive fields before logs are sent to the monitoring pipeline.

EC-CouncilDevSecOps Essentials

Domain 6Objective 4

Integrating Logging, Monitoring, and Alerting DSE Practice Questions (Page 10)

Part of the DevSecOps Monitoring and Feedback domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

5concepts

Questions 46–47

46expert · hard
A DevSecOps team is integrating logging, monitoring, and alerting for a new application. They have a requirement to provide real-time observability, but they also need to ensure that sensitive data (e.g., passwords, credit card numbers) is not logged. Which approach best meets both requirements?
Select an answer first
47foundation · easy
Which component in a unified observability pipeline is responsible for collecting and storing log data from various sources?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Integrating Logging, Monitoring, and Alerting DSE Practice Questions (Page 10)

Questions 46–47

A DevSecOps team is integrating logging, monitoring, and alerting for a new application. They have a requirement to provide real-time observability, but they also need to ensure that sensitive data (e.g., passwords, credit card numbers) is not logged. Which approach best meets both requirements?

Which component in a unified observability pipeline is responsible for collecting and storing log data from various sources?

Keep studying — DevSecOps Monitoring and Feedback