Observability and Compliance CT-QDO Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following are the three pillars of observability?

   • AMonitoring, alerting, and dashboards
   • BEvents, incidents, and changes
   • CLogs, metrics, and traces
   • DInfrastructure, application, and network
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Why is correlation important in implementing observability?

   • AIt links related logs, metrics, and traces to provide context for understanding system behavior
   • BIt reduces the amount of data collected, improving performance
   • CIt automatically resolves incidents without human intervention
   • DIt ensures that only authorized users can access telemetry data
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A team is troubleshooting a performance issue. They have metrics showing increased latency and traces showing that a specific database query is slow. However, they cannot determine why the query is slow. Which additional telemetry would be most helpful?

   • AUser feedback about the perceived slowness.
   • BAdditional traces from the application layer.
   • CMore metrics on CPU and memory usage.
   • DDatabase logs that show query execution plans and wait events.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How do logs, metrics, and traces enable understanding of system state?

   • AThey are primarily used for compliance reporting, not for operational insight
   • BThey provide complementary data that together give a complete picture of system behavior
   • CThey only help with performance tuning, not with understanding system state
   • DThey are redundant data sources that can be used interchangeably
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team needs to respond to a newly disclosed vulnerability in a widely used open-source library. They want to identify all internal applications that are affected. Which use of SBOMs is most effective?

   • AWait for the library maintainer to provide a list of affected applications.
   • BSearch all stored SBOMs for the vulnerable library and its affected version range.
   • CAsk each development team to manually check their dependencies.
   • DScan all running servers for the library's file signature.
   Reveal Solution Discussion Select an answer first