6.6 Ensuring the Reliability of Solutions in Production (e.g., Chaos Engineering, Penetration Testing, and Load Testing) PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which activity is typically within the scope of a penetration test?

   • AMeasuring the response time of the application under normal load.
   • BReviewing the code for syntax errors.
   • CAttempting to bypass authentication mechanisms to gain unauthorized access.
   • DInjecting artificial failures to observe system behavior.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How do chaos engineering, penetration testing, and load testing complement each other in a reliability strategy?

   • AThey test different aspects: resilience to failures, security, and performance under load.
   • BThey are only needed during the initial deployment, not in ongoing operations.
   • CThey are interchangeable and can be used in place of each other.
   • DThey are only useful for large enterprises with complex systems.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a key characteristic of a continuous reliability testing strategy?

   • ATests are run only after a major incident occurs.
   • BTests are run regularly and results are used to drive improvements.
   • CTests are run only once before the system goes live.
   • DTests are run only by a separate team without involving developers.
   Reveal Solution Discussion Select an answer first
5. 24expert · medium

   A government agency is required to conduct a penetration test on its public-facing systems. The agency must comply with regulatory requirements and avoid any disruption to critical services. Which of the following is the most important consideration when planning the test?

   • AEnsure the test is conducted by an external third-party vendor to maintain objectivity.
   • BRun the test without informing the internal security team to simulate a real attack.
   • CObtain all necessary approvals, including from the cloud provider, and schedule the test during a maintenance window.
   • DUse the most advanced penetration testing tools available to ensure comprehensive coverage.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A ride-sharing company is preparing for a New Year's Eve event. The engineering team wants to ensure the backend can handle a 3x increase in ride requests. They plan to run a load test. What is the most important metric to monitor during the test?

   • AEnd-to-end latency of ride requests, including time to match a driver.
   • BNetwork bandwidth usage between the app and the backend.
   • CCPU utilization of the application servers.
   • DNumber of active database connections.
   Reveal Solution Discussion Select an answer first