Observability and Compliance CT-QDO Practice Questions (Page 7)

Questions 31–33

1. 31application · easy

   A company develops a web application using several open-source libraries. To meet customer compliance requirements, they must provide a list of all third-party components and their licenses. Which artifact should they generate?

   • AA Software Bill of Materials (SBOM) that lists dependencies, versions, and licenses.
   • BA vulnerability scan report that lists known vulnerabilities in the dependencies.
   • CA code review checklist that verifies third-party code quality.
   • DA dependency lock file that pins exact versions of all libraries.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary role of telemetry in a DevOps environment?

   • ATo collect data about system behavior and performance for analysis and monitoring
   • BTo automatically deploy code changes to production
   • CTo enforce security policies on the system
   • DTo replace manual testing with automated tests
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   What is the key difference between telemetry and observability?

   • ATelemetry is a tool, while observability is a process
   • BTelemetry is only for performance, while observability is for security
   • CTelemetry is the collection of data, while observability is the ability to infer internal states from that data
   • DTelemetry is reactive, while observability is proactive
   Reveal Solution Discussion Select an answer first