6.6 Ensuring the Reliability of Solutions in Production (e.g., Chaos Engineering, Penetration Testing, and Load Testing) PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software company wants to conduct a penetration test on its customer-facing web application. The test will be performed by an external vendor. What should the company provide to the vendor before the test begins?

   • AProduction database credentials so the vendor can test real data.
   • BAccess to the source code so the vendor can review it for vulnerabilities.
   • CA detailed scope document that lists the systems and data in scope, along with the rules of engagement.
   • DA list of known vulnerabilities so the vendor can focus on those areas.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which practice is essential when running chaos experiments in production?

   • ALimiting the blast radius to minimize potential impact on users.
   • BKeeping the experiment details confidential from the operations team.
   • CRunning experiments without monitoring to avoid alert fatigue.
   • DEnsuring that all experiments are run during peak traffic hours.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which statement best describes the philosophy behind chaos engineering?

   • AFailures are inevitable, so systems should be designed and tested to withstand them.
   • BFailures can be completely prevented through rigorous testing and monitoring.
   • CFailures should be hidden from users to maintain a perception of reliability.
   • DFailures are rare and can be handled reactively when they occur.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A logistics company runs a shipment-tracking application. After a load test, the team notices that response times increase significantly when the number of concurrent users exceeds 5,000. What is the most likely next step to identify the bottleneck?

   • ADisable caching to see if the response times improve.
   • BImmediately scale up the application servers to handle more concurrent users.
   • CAnalyze the load test results to correlate response times with resource utilization, such as CPU, memory, and database queries.
   • DRun a chaos experiment to test the system's resilience to a server failure.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which step is typically performed after a penetration test is completed?

   • ARunning the test again with a different tool.
   • BDocumenting findings and providing remediation recommendations.
   • CDeleting all test data to ensure no traces remain.
   • DImmediately applying all patches without review.
   Reveal Solution Discussion Select an answer first