Exercise 2: The Four Scoping Questions — Possible Solution ==================================================================== THE FOUR QUESTIONS, PER THIS CHAPTER ------------------------------ 1. One machine, or many? 2. One resource elevated, or several at once? 3. Sudden onset, or a gradual drift? 4. Does it line up with a known event? QUESTION 1 — ONE MACHINE, OR MANY? ------------------------------ Per this chapter, "one machine points at something local to it; many machines at once points at something shared - a network dependency, a database, or a common upstream cause." QUESTION 2 — ONE RESOURCE, OR SEVERAL AT ONCE? ------------------------------ Per this chapter, several resources moving together is itself a clue - "heavy disk I/O can starve the CPU of work to do while it waits, which shows up as elevated CPU 'wait' time rather than a genuine CPU bottleneck." A single elevated resource points more directly at that resource specifically; several moving together can mean one is actually causing the other's symptom. QUESTION 3 — SUDDEN, OR GRADUAL? ------------------------------ Per this chapter, "a sudden change points toward a specific triggering event - a deployment, a cron job, a traffic spike; a slow drift over days or weeks points toward a genuine capacity or leak problem." QUESTION 4 — TIED TO A KNOWN EVENT? ------------------------------ Per this chapter, "a deployment, a scheduled job, or a marketing campaign happening at the same time is often the actual explanation, hiding in plain sight." WHY THIS WORKS AS AN ANSWER ------------------------------ It reproduces all four questions accurately and explains, for each one, what a specific answer points the investigation toward, using the chapter's own stated reasoning rather than just listing the questions without their purpose.