Incident Management Quiz

What are the three phases of incident management?

• Alerting, Diagnosing, Fixing

• Monitoring, Escalating, Closing

• Pre-Incident, Incident, Post-Incident

• Logging, Analysis, Reporting

Answer explanation

The correct answer is 'Pre-Incident, Incident, Post-Incident' as these phases encompass the entire lifecycle of incident management, from preparation to resolution and review.

What does MTTR measure?

• Mean Time to Diagnose Root Cause

• Mean Time to Resolve an issue

• Maximum Time to Respond

• Minimum Time to React

Answer explanation

MTTR stands for Mean Time to Resolve, which measures the average time taken to resolve an issue. This is crucial for assessing the efficiency of incident management and minimizing downtime.

What happens if MTTR exceeds RTO?

• The system auto-recovers

• Incident is ignored

• SLA might be breached and business impact increases

• It’s logged as a minor issue.

Answer explanation

If MTTR (Mean Time to Repair) exceeds RTO (Recovery Time Objective), it indicates that recovery is taking longer than acceptable, potentially breaching SLAs (Service Level Agreements) and increasing business impact.

What tool simulates browser-based journeys?

• Apica

• Kibana

• Jenkins

• Notion

Answer explanation

Apica is a tool specifically designed to simulate browser-based journeys, allowing users to test and monitor web applications effectively. The other options, like Kibana, Jenkins, and Notion, serve different purposes.

Where can you analyze AWS logs?

• AWS Inspector

• AWS CloudWatch Logs Insights

• CloudFormation

• Route 53

Answer explanation

You can analyze AWS logs using AWS CloudWatch Logs Insights, which provides powerful querying capabilities for log data. Other options like AWS Inspector and CloudFormation do not focus on log analysis.

Which tool offers dashboards, metrics, and alerts in one?

• Trello

• Datadog

• Figma

• MS Excel

Answer explanation

Datadog is a monitoring and analytics platform that provides dashboards, metrics, and alerts in one tool, making it ideal for tracking system performance and health. The other options do not offer this comprehensive functionality.

You fixed the issue, but users still report failure—what step are you in?

• Communication

• Validation

• Mitigation

• Detection

Answer explanation

You are in the Validation step, as users still report failures despite fixing the issue. This indicates the need to confirm that the solution works effectively and meets user expectations.

No updates sent for 10 minutes—what did you miss?

• Communication

• Monitoring

• Root Cause

• Mitigation

Answer explanation

The lack of updates for 10 minutes indicates a breakdown in communication. Effective communication is crucial to ensure all parties are informed and aligned, making it the key aspect missed in this scenario.

What should every PIR include?

• Blame report and screenshots

• Root cause, timeline, actions taken

• Just the fix

• Budget and ROI

Answer explanation

Every PIR should include the root cause, timeline, and actions taken to provide a comprehensive understanding of the incident and ensure effective resolution and prevention of future occurrences.

Who tracks MTTR and RTO during an incident?

• Communications Lead

• DevOps Engineer

• Incident Manager

• Project Manager

Answer explanation

The Incident Manager is responsible for tracking key metrics like Mean Time to Recovery (MTTR) and Recovery Time Objective (RTO) during an incident to ensure effective resolution and communication.