6.6 Ensuring the Reliability of Solutions in Production (e.g., Chaos Engineering, Penetration Testing, and Load Testing) PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A ticketing platform expects a surge in traffic for a popular concert sale. The engineering team wants to verify that the system can handle the expected load. What is the most appropriate type of test to run?

   • AA stress test that exceeds the expected load to find the system's breaking point.
   • BA chaos experiment that terminates a random server to see if the system recovers.
   • CA penetration test to identify security vulnerabilities that could be exploited during the sale.
   • DA load test that simulates the expected number of concurrent users during the sale.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A retail company wants to validate the security of its public-facing web application. The security team plans to conduct a penetration test. Which of the following is a best practice for executing the test?

   • AStart the test immediately after receiving verbal approval from the project manager.
   • BPerform the test without informing the internal security team to simulate a real attack.
   • CDefine clear rules of engagement, including test timing, allowed techniques, and emergency stop procedures.
   • DUse automated scanning tools only, as they are faster and more comprehensive than manual testing.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common outcome of analyzing load test results?

   • AValidating that the system can recover from a regional outage.
   • BDiscovering security vulnerabilities in the application code.
   • CConfirming that the system is immune to hardware failures.
   • DIdentifying performance bottlenecks such as database connection limits.
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A SaaS company wants to integrate chaos, penetration, and load testing into its continuous delivery pipeline. The team must ensure that tests run automatically without slowing down releases significantly. Which approach best achieves this?

   • ARun all three tests in the production environment after every deployment, without any scheduling.
   • BRun chaos and penetration tests only after a major incident occurs, to avoid unnecessary testing.
   • CRun load tests in a staging environment on every commit, and run chaos and penetration tests in production on a scheduled basis.
   • DRun all three tests only in staging environments, since production testing is too risky.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A healthcare company is preparing to run a penetration test against its production environment, which hosts patient data. The security team has received written authorization from management. What is the most important additional step before starting the test?

   • AEnsure the test scope is clearly defined, including which systems and data are in scope, and obtain approval from the cloud provider if required.
   • BDisable all logging and monitoring to avoid alerting the security team during the test.
   • CRun the test during business hours to observe real user behavior and system load.
   • DUse the same credentials as a regular user to test the system from an insider perspective.
   Reveal Solution Discussion Select an answer first