6.6 Ensuring the Reliability of Solutions in Production (e.g., Chaos Engineering, Penetration Testing, and Load Testing) PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A large enterprise runs a critical order-processing system on GKE. The SRE team wants to introduce chaos engineering but faces resistance from management due to the risk of impacting real orders. Which strategy is most likely to gain management approval while still providing valuable resilience insights?

   • AStart with chaos experiments in a staging environment that mirrors production, and present the results to management to demonstrate the value.
   • BRun chaos experiments only during non-business hours and without informing management.
   • CRun a full-scale chaos experiment in production immediately to prove the system's resilience.
   • DFocus only on load testing and penetration testing, since they are less risky than chaos engineering.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A social media company wants to adopt chaos engineering to improve the reliability of its news feed service. The team is new to chaos engineering and wants to start with a safe, low-risk experiment. What is the best first experiment?

   • ATerminate a non-critical, stateless microservice in a staging environment to observe how the system degrades.
   • BRun a load test to see how the system performs under high traffic.
   • CTerminate the primary database in production to test the failover mechanism.
   • DDisable the news feed service in production to see how users react.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of chaos engineering in a production environment?

   • ATo intentionally introduce failures to uncover weaknesses in the system before they cause real incidents.
   • BTo test the security of the system by simulating attacks from malicious actors.
   • CTo simulate normal user traffic to verify that the system can handle expected load.
   • DTo verify that the system can recover from a disaster in a different region.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A bank wants to validate the security of its mobile banking application. The security team plans to conduct a penetration test. What is the primary goal of this test?

   • AVerify that the application's user interface is intuitive and easy to use.
   • BTest the application's ability to recover from a server failure.
   • CMeasure the application's performance under peak load to ensure it can handle many users.
   • DIdentify vulnerabilities that could be exploited by attackers to gain unauthorized access to customer data.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services company runs a stateful payment-processing service on Google Kubernetes Engine (GKE) with a single regional cluster. The SRE team wants to proactively identify weaknesses in the service's ability to survive a zonal failure before an incident occurs. They have approval to run controlled experiments during off-peak hours. What should they do first?

   • ARun a load test that doubles traffic to the service to observe how it behaves under stress.
   • BImmediately terminate all nodes in the cluster to see if the service recovers, without prior planning.
   • CEnable GKE's maintenance exclusions to prevent any node updates during the testing window.
   • DDefine a hypothesis, such as 'the service remains available if one zone fails,' and design a chaos experiment that terminates all nodes in one zone.
   Reveal Solution Discussion Select an answer first