Observability and Compliance CT-QDO Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement correctly relates telemetry and observability?

   • AThey are synonymous terms for the same concept
   • BThey are unrelated concepts that serve different purposes
   • CTelemetry is achieved through the effective use of observability
   • DObservability is achieved through the effective use of telemetry data
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A DevOps team is implementing observability for a system with strict data privacy requirements. They must avoid collecting personally identifiable information (PII) in logs and traces. However, they need to correlate requests to specific users for troubleshooting. Which approach best balances these constraints?

   • AEncrypt the logs and traces so that only authorized personnel can read them.
   • BUse a pseudonymous correlation ID that is not directly linked to the user, and store the mapping separately with restricted access.
   • CCollect full user IDs in logs and traces to enable easy correlation.
   • DDo not collect any correlation data to avoid privacy risks.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a Software Bill of Materials (SBOM)?

   • AA list of all the hardware components required to run a software application
   • BA document that describes the functional requirements of a software system
   • CA formal record containing the details and supply chain relationships of various components used in building software
   • DA record of all the bugs and issues found in a software release
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A DevOps team wants to automatically block a build if any dependency in the SBOM has a known critical vulnerability. Which practice should they implement in the CI pipeline?

   • AUse a dependency lock file to prevent new vulnerabilities.
   • BGenerate the SBOM after deployment and check for vulnerabilities then.
   • CRun a vulnerability scanner that compares the SBOM against a vulnerability database and fails the build on critical findings.
   • DManually review the SBOM before each release.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement best defines telemetry in a DevOps context?

   • AA method for automatically fixing system errors without human intervention
   • BA framework for managing software dependencies and licenses
   • CThe ability to infer a system's internal state from its external outputs
   • DThe practice of automatically collecting and transmitting data about a system's behavior and performance
   Reveal Solution Discussion Select an answer first