Monitoring and Logging ECDE Practice Questions (Page 9)

Questions 41–43

1. 41foundation · easy

   Which statement best describes the role of monitoring in the DevSecOps Operate and Monitor stage?

   • AIt focuses solely on application code, ignoring infrastructure and network components
   • BIt provides visibility into the health, performance, and security of applications and infrastructure in production
   • CIt is only used during incident response and has no role in day-to-day operations
   • DIt replaces the need for security testing during the build phase
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A large enterprise runs a mix of on-premises servers and AWS workloads. They need a unified monitoring solution that provides both infrastructure and application metrics, supports alerting, and can be extended with custom plugins. The team has limited budget for licensing and prefers open-source tools. Which solution best meets these requirements?

   • AImplement a custom monitoring solution from scratch using Python scripts.
   • BDeploy Prometheus with the Prometheus Node Exporter and use Grafana for dashboards and alerting.
   • CUse Amazon CloudWatch exclusively for all monitoring.
   • DUse Datadog for all monitoring needs.
   Reveal Solution Discussion Select an answer first
3. 43foundation · easy

   How do monitoring and logging feed into incident response?

   • AThey provide the data needed to detect, investigate, and understand the scope of an incident
   • BThey replace the need for an incident response plan
   • CThey automatically contain the incident by isolating affected systems
   • DThey only provide information after the incident is resolved
   Reveal Solution Discussion Select an answer first