Real-time monitoring and notification

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Real-time monitoring checks for threats continuously rather than only at scheduled times.

A True

B False

2. Which catches an active attack faster: real-time monitoring, or a daily log review?

A A daily log review

B Real-time monitoring

3. Notifications should be delayed until the next scheduled check rather than sent immediately.

A True

B False

4. Which should trigger an immediate notification: an anomaly detected right now, or nothing until end of day?

A An anomaly detected right now

B Nothing until end of day

5. Real-time monitoring is only effective if alerts are sent immediately when a threat is detected.

A True

B False

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1notify(admin, status)		Amonitoring_active = True
2status = check_activity()		BSending an alert to the admin about detected activity
3Real-time monitoring continuously checks for threats as they happen		CThe mistake: disabling monitoring, so anomalies won't be checked
4An immediate alert is sent as soon as an anomaly is detected		DThe mistake: delaying the check, breaking real-time detection
5monitoring_active = False		Eif status == "anomaly": notify(admin, status)
6wait(3600)		FChecking current network activity for anomalies

Definitions

Real-time monitoring

Fill in the Blanks

Complete each line of code by filling in the missing parts.

__________ = False

def ______________():

______(admin, message)

if status __ "anomaly":

_________________ = True

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A monitoring_active = False

B check_activity()

C notify(admin, msg)

Question 2

A monitoring_active = True

B skip_check = True

C notify(admin, msg)

Question 3

A status = get_status()

B if status == "anomaly":

C ignore_alert = True

Question 4

A delay_notify = True

B status = check_activity()

C notify(admin, status)

Question 5

A monitoring_active = True

B status = check_activity()

C if status == "anomaly":

D log_only = True

Answer Key

Real-time monitoring and notification

Section A: Quick Questions

A — True

B — Real-time monitoring

B — False

A — An anomaly detected right now

A — True

Section B: Match the Pairs

notify(admin, status) → Sending an alert to the admin about detected activity

status = check_activity() → Checking current network activity for anomalies

Real-time monitoring continuously checks for threats as they happen → monitoring_active = True

An immediate alert is sent as soon as an anomaly is detected → if status == "anomaly": notify(admin, status)

monitoring_active = False → The mistake: disabling monitoring, so anomalies won't be checked

wait(3600) → The mistake: delaying the check, breaking real-time detection

Section C: Definitions

Real-time monitoring — Continuously checking network activity as it happens and immediately alerting the right people when a threat is detected.

Section D: Fill in the Blanks

alert_sent = False

def check_activity():

notify(admin, message)

if status == "anomaly":

monitoring_active = True

Section E: Spot the Error

A — Line 1 disables monitoring, so real-time notification never gets triggered.

B — Line 2 skips the activity check needed before deciding whether to notify.

C — Line 3 ignores the alert instead of notifying when an anomaly is detected.

A — Line 1 delays notification, breaking the requirement for immediate, real-time alerts.

D — Line 4 only logs the anomaly instead of sending a real-time notification.