A company has a log management system that stores logs in hot storage for 30 days and then moves them to cold storage. They are required to keep logs for 7 years. However, they are running out of cold storage space. What is the most cost-effective way to extend retention without losing data?

Delete logs older than 5 years to free up space.

Move all logs to hot storage to avoid cold storage limits.

Compress logs before moving them to cold storage and use a storage tier with lower cost per GB.

Reduce the retention period to 3 years to save space.

An application logs structured JSON events to stdout. The operations team wants to quickly identify all requests that returned HTTP 500 errors in the last hour and see the corresponding user IDs. Which query approach is most efficient?

Enable debug logging and then search for 'error' in the log messages.

Search for the string '500' across all log messages and manually scan the results for user IDs.

Use a query language that supports filtering on the JSON field for status code and then project the user ID field.

Download all logs from the last hour and use a text editor to find lines containing '500'.

A security team needs to ensure that logs are tamper-proof and that any unauthorized access to logs is detected. They have a centralized log management system. Which measures should they implement? (Select all that apply.)

Use cryptographic hashing to create a chain of custody for log files.

Store logs in a public bucket for easy access.

Allow all administrators to delete logs to manage storage.

Implement role-based access control to restrict who can modify or delete logs.

Enable audit logging on the log management system itself.

What is the purpose of setting up alerts based on log data?

To compress log files for storage

To automatically fix issues in the application

To notify administrators of potential issues or anomalies

LPI DevOps Tools Engineer

Domain 4Objective 3

704.3 Log Management and Analysis (weight: 2) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 5)

Part of the 704 Security and Observability domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

Questions 21–25

21expert · hard
A company has a log management system that stores logs in hot storage for 30 days and then moves them to cold storage. They are required to keep logs for 7 years. However, they are running out of cold storage space. What is the most cost-effective way to extend retention without losing data?
Select an answer first
22application · medium
An application logs structured JSON events to stdout. The operations team wants to quickly identify all requests that returned HTTP 500 errors in the last hour and see the corresponding user IDs. Which query approach is most efficient?
Select an answer first
23expert · hard · select all that apply
A security team needs to ensure that logs are tamper-proof and that any unauthorized access to logs is detected. They have a centralized log management system. Which measures should they implement? (Select all that apply.)
Select an answer first
24foundation · easy
Which tool is commonly used to collect and forward logs from various sources to a central location?
Select an answer first
25foundation · easy
What is the purpose of setting up alerts based on log data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.