704.3 Log Management and Analysis (weight: 2) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company wants to monitor the health of their microservices by tracking the number of errors per service. They have centralized logs. What should they create to get a real-time overview?

   • AA script that prints error counts to the console when run manually.
   • BA daily email report with error counts.
   • CA dashboard with panels for each service showing error counts over time.
   • DA log file that records all errors without any aggregation.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An operations team uses a log management system that supports querying. They need to identify the root cause of a service outage that occurred between 10:00 and 10:15 AM. They have logs from multiple services. What is the most effective approach?

   • ALook only at the application server logs for that time window.
   • BCheck the monitoring dashboards for that time window and ignore logs.
   • CQuery logs from all services for that time window and correlate events by timestamp and service dependencies.
   • DSearch for error messages in the logs without filtering by time.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A DevOps team wants to reduce the storage cost of logs while still being able to search logs from the last 90 days. They also need to keep logs for 2 years for compliance. Which strategy should they implement?

   • ACompress logs older than 90 days and move them to cheaper archival storage, while keeping recent logs in fast storage.
   • BUse log rotation on each server to overwrite old logs after 90 days.
   • CDelete logs older than 90 days to save space.
   • DStore all logs in the same high-performance storage for 2 years.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A healthcare organization must protect patient data in logs and ensure that only authorized personnel can access them. They also need to retain logs for 6 years. Which combination of measures should they implement?

   • AUse a public log aggregation service without encryption.
   • BStore logs in plain text on a shared drive with read access for all employees.
   • CDelete logs after 1 year to reduce risk of data breach.
   • DEncrypt logs at rest and in transit, implement role-based access control, and use immutable storage for retention.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a centralized logging system that receives logs from multiple environments. They want to set up an alert for when the disk usage on any server exceeds 90%. However, they receive many false positives because some servers send heartbeat logs that include disk usage metrics. What is the best way to reduce false positives?

   • ADisable alerts for servers that send heartbeats.
   • BIncrease the threshold to 95% to avoid false positives.
   • CCreate a query that filters for disk usage metrics and set a threshold of 90%, then alert only if the condition persists for 10 minutes.
   • DAlert on any log message containing 'disk usage'.
   Reveal Solution Discussion Select an answer first