Monitoring and Logging ECDE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   How does logging support compliance requirements?

   • ABy providing an audit trail of actions and events that can be reviewed by auditors
   • BBy encrypting sensitive data in transit
   • CBy automatically enforcing security policies
   • DBy preventing unauthorized access to systems
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A team uses a mix of cloud services and on-premises servers. They need a single tool to monitor metrics from all sources and create dashboards. Which tool is best suited for this?

   • AA separate monitoring tool for each environment, with no integration.
   • BA spreadsheet that manually collects metrics from each system.
   • CPrometheus with exporters for cloud services and on-premises hosts, plus Grafana for dashboards.
   • DA log management tool that only ingests logs, not metrics.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   How can logs and metrics be used to detect security threats?

   • ABy restricting access to the monitoring dashboard
   • BBy analyzing patterns of unusual behavior, such as failed login attempts or unexpected network traffic
   • CBy regularly updating software patches
   • DBy encrypting all data at rest
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A financial services company must demonstrate to an auditor that only authorized personnel accessed customer data in the last quarter. The company uses a centralized logging system. Which logging practice is most critical to meet this audit requirement?

   • AStore logs in a write-once, read-many (WORM) storage to prevent tampering.
   • BLog all authentication and authorization decisions, including user identity, timestamp, and resource accessed.
   • CEnable verbose logging for all application events, including debug-level messages.
   • DRetain logs for at least one year in a centralized SIEM.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is adopting a DevSecOps culture and wants to implement monitoring and logging best practices. They have a mix of legacy and cloud-native applications. Which approach best balances standardization and flexibility?

   • ALet each team choose their own logging format and tools.
   • BDefine a standard logging format (e.g., JSON) and require all applications to emit logs in that format, using a centralized pipeline.
   • CLog everything at the debug level to ensure no data is missed.
   • DUse a single commercial monitoring tool for everything.
   Reveal Solution Discussion Select an answer first