KCNA Cloud Native Observability Practice Question
Which of the following is NOT one of the three pillars of observability?
⚠ Common exam trap
The trap is that alerts feel like a core part of observability because they are prominent in monitoring tools, but the exam expects you to recognize the three data types that provide observability, not the actions taken on them.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Alerts
The three pillars of observability are metrics, logs, and traces. Metrics are numeric measurements aggregated over time, logs are timestamped records of discrete events, and traces follow a request's path through distributed systems. Alerts are not a pillar; they are a downstream action or notification triggered by conditions derived from the pillars. Therefore, alerts is the correct answer as the item that is NOT a pillar.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Metrics
Why it's wrong here
Metrics are a foundational pillar of observability, so they cannot be the item that is not one. The question seeks the non-pillar; metrics are tempting because they are sometimes contrasted with newer signals, but they remain one of the three alongside logs and traces.
- ✗
Logs
Why it's wrong here
Logs are one of the three pillars, so they cannot be the exception the question seeks. Logs are tempting because they are often treated as traditional monitoring rather than observability, yet they remain a core signal alongside metrics and traces.
- ✗
Traces
Why it's wrong here
Traces are one of the three pillars, alongside metrics and logs, so they cannot be the exception. The question asks which is NOT a pillar; traces are tempting because distributed tracing is often discussed separately from monitoring, yet it remains a core observability signal rather than an outsider.
- ✓
Alerts
Why this is correct
Alerts are a downstream response mechanism built on observability data, not a source of it. The three pillars are logs, metrics, and traces; alerting consumes these signals through rules, so it does not itself constitute a pillar.
Go deeper
Related to this question
About these practice questions
This KCNA question is part of Courseiva's 930-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CNCF exam blueprint
This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.