704.3 Log Management and Analysis (weight: 2) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A multinational company must comply with GDPR, which requires that personal data in logs be protected and that logs be retained only as long as necessary. They also need logs for security investigations. What is the best approach?

   • AEncrypt logs but do not set any retention limits.
   • BAnonymize personal data in logs before storage and set a retention policy that deletes logs after a defined period, while keeping a minimal set for security investigations.
   • CStore all logs indefinitely to ensure availability for any future investigation.
   • DDelete all logs after 24 hours to minimize data exposure.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A support engineer needs to find all login failures for a specific user across multiple servers in the last 24 hours. The logs are centralized in a system that supports querying. What is the most efficient way to get this information?

   • ARun a query that filters logs for the user and event type 'login failure' across all servers and time range.
   • BSSH into each server and grep the local logs for the user.
   • CDownload all logs from the last 24 hours and use a spreadsheet to filter.
   • DAsk the user to retry logging in and observe the logs in real time.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is required to retain logs for 5 years, but their log management system charges for data ingestion and storage. They want to minimize costs while ensuring logs are available for compliance audits. What is the most cost-effective strategy?

   • AIngest all logs, compress them, and move older logs to cheaper archival storage with limited access.
   • BStore logs in a free tier of a public cloud service without any guarantees.
   • CIngest only error logs and discard informational logs.
   • DUse a log management system that does not charge for storage.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A site reliability team wants to be notified when the rate of 5xx errors from their web application exceeds 5% of total requests over a 5-minute window. They have centralized logs in a queryable system. What should they configure?

   • AA dashboard that displays the 5xx error rate, and a manual check by the on-call engineer every 5 minutes.
   • BA log parser that extracts 5xx errors and writes them to a separate file for later analysis.
   • CA cron job that sends the entire log file to the team's email every 5 minutes.
   • DAn alert rule that runs a query to calculate the error rate and triggers a notification when the threshold is exceeded.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of log rotation?

   • ATo encrypt log files for security
   • BTo forward logs to a central server
   • CTo prevent log files from consuming excessive disk space
   • DTo parse logs into structured data
   Reveal Solution Discussion Select an answer first