CDM Monitoring, Logging & Incident Response 3

Question 1

What does the term 'cardinality' refer to in the context of time-series monitoring systems like Prometheus?

Accepted Answer

The total number of unique label value combinations for a metric

Answer

Cardinality refers to the number of unique time series created by combining all label values for a metric; high cardinality can cause memory and performance issues.

Question 2

In an incident response process, what is the primary purpose of a 'war room'?

Accepted Answer

To bring all key responders together in real time to coordinate resolution

Answer

A war room (physical or virtual) centralizes communication and decision-making during a major incident to speed up resolution.

Question 3

A team uses structured logging with JSON format instead of plain text. What is the primary operational benefit?

Accepted Answer

Easier machine parsing and querying of specific fields

Answer

Structured JSON logs allow log aggregation systems to index and query specific fields efficiently without complex regex parsing.

Question 4

Which incident severity level typically requires immediate 24/7 on-call response and represents complete service unavailability?

Accepted Answer

SEV-1

Answer

SEV-1 (or P1) is the highest severity for complete outages, requiring immediate escalation and all-hands response around the clock.

Question 5

What is the key difference between black-box monitoring and white-box monitoring?

Accepted Answer

Black-box tests external behavior without internal visibility; white-box uses internal metrics and logs

Answer

Black-box monitoring simulates user experience from outside the system, while white-box monitoring uses internal telemetry like metrics, logs, and traces.

(CDM) Certified DevOps Master Practice Test

(CDM) Certified DevOps Master Practice Test

CDM Monitoring, Logging & Incident Response 3