Unit 6: Understanding of Monitoring, Logging, Security & DevOps Best Practices - Practice Quiz

1 What is the primary purpose of monitoring in a DevOps environment?

2 Which of the following is a key benefit of monitoring in DevOps?

3 What is Prometheus primarily used for?

4 What is Grafana mainly known for?

5 Prometheus and Grafana are commonly used together in which combination?

6 What does the letter 'E' stand for in the ELK Stack?

7 Which component of the ELK Stack is responsible for collecting and processing log data?

8 Which ELK Stack component is used to visualize and explore log data?

9 Which of the following are considered the three pillars of observability?

10 What do 'traces' primarily help track in a system?

11 Which observability pillar consists of numeric measurements collected over time?

12 What is the main goal of DevSecOps?

13 In DevSecOps, security is best described as being handled at which stage?

14 What does the acronym SRE stand for?

15 Which company originally introduced the concept of Site Reliability Engineering?

16 Which of the following is a widely recommended DevOps best practice?

17 Which practice encourages frequent, small code changes in DevOps?

18 What is Netflix's Chaos Engineering primarily used for?

19 Which famous tool did Netflix create for Chaos Engineering?

20 What is the core idea behind GitOps?

21 A team notices that their application meets all uptime targets but users still complain about slow checkout times during peak hours. Which monitoring gap does this scenario most directly highlight?

22 In a Prometheus-based setup, an engineer wants to scrape metrics from a short-lived batch job that exits before Prometheus can poll it. Which component should be used?

23 A team uses Prometheus for data collection and Grafana for visualization. Which statement correctly describes the division of responsibility?

24 Which PromQL expression correctly calculates the per-second rate of HTTP requests over the last 5 minutes for a counter named http_requests_total?

25 In the ELK stack, an engineer needs to parse raw unstructured log lines, extract fields, and enrich them before storage. Which component is primarily responsible for this?

26 A team wants a lightweight agent installed on hundreds of servers to forward logs to Logstash without heavy processing. Which tool best fits this requirement?

27 Which role does Elasticsearch play within the ELK stack?

28 A microservice request passes through five services and fails intermittently. Which observability pillar is most useful for pinpointing exactly which service in the request path introduced the latency?

29 Which statement best distinguishes metrics from logs in an observability strategy?

30 A team says their system is "monitored" but they cannot explain unexpected new failure modes without adding new code. What does this indicate about their setup?

31 Which practice best embodies the "shift-left" principle of DevSecOps?

32 A pipeline scans source code for vulnerabilities without executing it, analyzing the code structure directly. Which type of testing is this?

33 A service has an SLO of 99.9% availability over 30 days. Roughly how much error budget (allowed downtime) does this permit in that period?

34 In SRE, what is the primary purpose of an error budget?

35 Which pairing correctly orders these SRE reliability terms from customer commitment to internal target to measured value?

36 A team commits small changes frequently to a shared branch and runs automated builds and tests on each commit. Which DevOps practice are they primarily following?

37 Why is treating infrastructure as version-controlled code (IaC) considered a DevOps best practice?

38 Google SRE caps the amount of manual, repetitive operational work engineers do so they can focus on engineering. What is this repetitive work called?

39 Netflix's Chaos Monkey randomly terminates production instances. What is the main engineering goal of this practice?

40 In a GitOps workflow, how is the desired state of infrastructure and applications typically applied to a cluster?

41 In a Prometheus setup scraping 5000 targets every 15s, an SRE observes that rate(http_requests_total[1m]) produces erratic spikes while rate(http_requests_total[5m]) is smooth. What is the most accurate explanation?

42 A team has metrics, logs, and distributed traces but still cannot answer why a specific user's request was slow. Which gap in their observability practice is the most likely root cause?

43 During a traffic surge, Logstash falls behind and Elasticsearch shows rejected bulk requests. Which architectural change best addresses back-pressure without dropping logs?

44 A service has an SLO of 99.9% availability over 30 days. After 12 days it has already consumed 80% of its error budget. According to SRE principles, what is the correct action?

45 A pipeline runs SAST, DAST, SCA, and secrets scanning. A subtle vulnerability arises from how two independently-safe microservices interact at runtime under load. Which control is most likely to catch it?

46 Which statement best captures the core scientific discipline that distinguishes chaos engineering from simply 'breaking things in production'?

47 In a GitOps model using a pull-based reconciliation agent, an operator manually runs kubectl scale to increase replicas during an incident. What happens and why?

48 An engineer creates a label user_id on a Prometheus metric to track per-user latency across millions of users. Why is this considered a serious anti-pattern?

49 Google's SRE model caps operational 'toil' at roughly 50% of an SRE's time. What is the primary strategic reason for this ceiling?

50 A system emits 10 million spans/hour, and storing all of them is cost-prohibitive. The team wants to keep traces of slow or errored requests. Which sampling strategy fits best?

51 Consider the relationship between availability nines and downtime. Which pairing of monthly (30-day) allowable downtime is correct?

52 A security team wants to enforce that no build proceeds if a critical CVE is found, but developers complain about excessive false-positive build failures. What is the most balanced DevSecOps approach?

53 An organization has excellent uptime dashboards but repeatedly suffers outages that dashboards did not predict. Which monitoring gap most directly explains this?

54 In Elasticsearch, a team indexes daily log indices but query latency degrades over months. Their oldest data is rarely queried. Which optimization directly addresses this?

55 An 'AIOps' platform correlates thousands of alerts into a single incident and suppresses the rest. During a novel failure mode, it wrongly suppresses the one alert that mattered. What is the key limitation illustrated?

56 A team practices trunk-based development but suffers frequent broken builds on the main branch. Which combination of practices most directly restores main-branch stability?

57 Google SRE distinguishes SLI, SLO, and SLA. A team promises customers 99.5% availability contractually but targets 99.9% internally and measures request success ratio. Which mapping is correct?

58 Netflix's Chaos Monkey randomly terminates instances in production during business hours. What is the deliberate engineering rationale for this seemingly reckless timing?

59 A team argues that metrics alone are sufficient because they can compute percentiles and rates cheaply. What fundamental limitation of pre-aggregated metrics does this overlook?

60 A startup claims to have achieved true 'NoOps' by adopting serverless. Which critique most accurately reflects the practical reality of NoOps?