Integrating Logging, Monitoring, and Alerting DSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An e-commerce platform experiences periodic traffic spikes during flash sales. The operations team has set a static alert threshold for CPU usage at 80%. During a recent flash sale, the alert fired repeatedly, causing alert fatigue, and a genuine database connection pool exhaustion went unnoticed for several minutes. What should the team do to improve alerting effectiveness?

   • ARoute all alerts to the on-call engineer's personal phone to ensure they are noticed.
   • BIncrease the CPU threshold to 95% to reduce the number of alerts.
   • CImplement dynamic thresholds based on historical baseline and alert on rate-of-change or specific error patterns.
   • DDisable CPU alerts entirely and rely on manual dashboard review during sales events.
   Reveal Solution Discussion Select an answer first
2. 17application · medium · select all that apply

   A DevSecOps team is implementing monitoring for a critical application. They want to ensure they have visibility into both system health and security. Which of the following should they include in their monitoring strategy? (Select all that apply.)

   • ACollecting security logs from firewalls and intrusion detection systems.
   • BCollecting system metrics such as CPU, memory, and disk I/O.
   • CSetting up alerts only for critical system failures.
   • DCollecting application logs that record user actions and errors.
   • EUsing distributed tracing to follow requests across services.
   Check answers Discussion Select an answer first
4. 18application · medium

   An operations team is setting up monitoring for a batch processing system that runs nightly. They need to know if a job fails, how long it takes, and whether the output data is complete. Which monitoring approach should they use?

   • AUse a synthetic transaction that mimics the batch job and monitor its response time.
   • BEnable tracing on the batch job to see the internal steps, but do not set any alerts.
   • CLog every record processed to a file and review it manually each day.
   • DCollect metrics for job duration and success/failure status, and set alerts on failure and abnormal duration.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of configuring an alert threshold in a monitoring system?

   • ATo replace the need for log analysis by providing real-time metrics
   • BTo store historical data for compliance audits
   • CTo automatically fix the underlying issue without human intervention
   • DTo define a condition that, when met, triggers a notification to the relevant team
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A DevSecOps team has implemented comprehensive monitoring and alerting. They want to ensure that the insights from production are used to improve the security of future releases. They have a weekly meeting to review incidents, but developers are not consistently applying lessons learned. What is the most effective way to institutionalize the feedback loop?

   • ASend an email summary of all alerts to the development team after each release.
   • BCreate a shared document with lessons learned and require developers to read it before each release.
   • CHold a monthly retrospective to discuss all alerts from the past month.
   • DAutomatically create work items from alerts and link them to the relevant code repositories, and require closure before the next release.
   Reveal Solution Discussion Select an answer first