KCNA Cloud Native Observability Practice Question
Which of the following is a core component of the three pillars of observability?
⚠ Common exam trap
KCNA often tests whether candidates confuse observability data sources (logs, metrics, traces) with observability tooling and derived signals (dashboards, alerts, SLIs), so candidates who pick 'Alerting' or 'Dashboards' mistake consumption layers for foundational pillars.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Logs
The three pillars of observability are logs, metrics, and traces. Logs are discrete, timestamped records of events that provide detailed context about what happened in a system, making them a foundational pillar. Alerting, SLIs, and dashboards are downstream consumers or derived artifacts built on top of these pillars, not pillars themselves.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Alerting
Why it's wrong here
Alerting is a notification mechanism built on top of collected telemetry, not a pillar itself; the three pillars are metrics, logs and traces. It tempts because alerting is central to day-two operations, and would be the right answer were the question asking how teams are paged when thresholds breach.
- ✗
SLIs
Why it's wrong here
SLIs are service-level measurements derived from telemetry, not a pillar; the pillars are metrics, logs and traces. They tempt because SLIs underpin SLOs and error budgets, and an SLI would be the right answer if the question asked what quantifies service reliability for an SLO.
- ✓
Logs
Why this is correct
Logs are one of the three pillars of observability, alongside metrics and traces. They record discrete, timestamped events with contextual detail, enabling retrospective debugging of why a system behaved as it did, which metrics and traces alone cannot fully explain.
- ✗
Dashboards
Why it's wrong here
Dashboards are a visualisation layer that renders the three pillars' data; they generate no telemetry of their own. They tempt because observability tooling is usually judged by its dashboards, and a dashboard would be the correct choice if the question asked how to present metrics to stakeholders.
Go deeper
Related to this question
About these practice questions
This KCNA question is part of Courseiva's 930-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CNCF exam blueprint
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.