Monitoring and Logging ECDE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Why is centralized log management important in a DevSecOps environment?

   • AIt automatically encrypts all log data at rest
   • BIt eliminates the need for any other security monitoring tools
   • CIt reduces the volume of logs generated by applications
   • DIt enables correlation of events across multiple systems and simplifies searching and analysis
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A startup is deploying a containerized application on AWS and wants to monitor both infrastructure metrics (CPU, memory) and application-level metrics (request latency, error rates) with minimal operational overhead. Which toolset best fits this requirement?

   • AUse AWS Config to monitor resource configuration changes.
   • BAmazon CloudWatch for infrastructure metrics and AWS X-Ray for application tracing, with custom CloudWatch metrics for latency and errors.
   • CUse only Kubernetes Dashboard to view resource usage.
   • DSelf-hosted Prometheus and Grafana on EC2 instances.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the DevSecOps Operate and Monitor stage, what is the primary purpose of monitoring?

   • ATo enforce security policies by blocking unauthorized access in real time
   • BTo replace the need for manual testing by automatically fixing all code defects
   • CTo store all application logs permanently for compliance purposes
   • DTo collect and analyze data about system behavior and performance to detect issues and support continuous improvement
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A DevSecOps team is deploying a new feature that changes the authentication flow. They want to ensure that the change does not degrade user experience. Which monitoring practice should they implement?

   • AMonitor the number of code deployments per week.
   • BMonitor the CPU usage of the authentication service.
   • CMonitor the response time of the authentication endpoint and set an alert for p95 latency exceeding 500 ms.
   • DMonitor the number of active users on the platform.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A DevSecOps team is designing a monitoring system for a high-traffic e-commerce platform. They need to balance the cost of monitoring with the need to detect issues quickly. Which approach best balances these concerns?

   • ACollect no metrics and rely on user reports to detect issues.
   • BCollect high-resolution metrics for critical services and lower-resolution metrics for non-critical services, with alerts only on critical thresholds.
   • CCollect all metrics at the highest resolution for every service and alert on every possible threshold.
   • DCollect metrics only during business hours to save cost.
   Reveal Solution Discussion Select an answer first