A plugin is being designed to allow users to request a temporary access token for a database. The token is generated by a backend service that requires a master password. The plugin should show a form and then display the token. How should this plugin be built?

Backend plugin only, which renders the form and displays the token

Frontend plugin only, using a public API that requires no password

Frontend plugin only, with the master password embedded in the frontend code

Both frontend and backend plugins: frontend for the form and display, backend for generating the token

Which of the following tasks is typically performed by a backend plugin in Backstage?

Handling user clicks and form submissions

Providing an API endpoint that returns data from an external service

Rendering a custom tab on the entity page

Displaying a catalog entity's metadata in a table

How does a frontend plugin in Backstage typically obtain data from a backend plugin?

By using WebSockets to subscribe to real-time updates

By making HTTP requests to the backend plugin's API endpoints

By directly importing the backend plugin's code

By reading from a shared in-memory database

A team wants to add a 'Deploy to Production' button to a service's overview page. The button should trigger a deployment via a backend plugin that calls an external orchestration API. What is the standard way for the frontend button to invoke the backend action?

The frontend plugin writes to a shared database that the backend plugin polls

The frontend plugin imports the backend plugin's functions and calls them locally

The frontend plugin calls the backend plugin's REST API endpoint directly

The backend plugin listens for a custom event emitted by the frontend

A Backstage plugin needs to display a user's calendar events from Microsoft 365. The plugin must respect the user's permissions and not require a global service account. The team wants to avoid building a custom OAuth flow. What is the recommended approach?

Use a shared service account with read-only access to all calendars

Use the frontend plugin to perform an implicit grant flow and call Microsoft Graph directly

Have the user manually generate an API key and paste it into the plugin

Use the Backstage backend to perform an OAuth2 authorization code flow with the Microsoft identity platform, then call Microsoft Graph on behalf of the user

Certified Backstage Associate (CBA)

Domain 4Objective 1

Understand Frontend Versus Backend Plugins CBA Practice Questions (Page 1)

Part of the Customizing Backstage domain, which accounts for 32% of the CBA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

3concepts

32%of the exam

Questions 1–5

1application · medium
A plugin is being designed to allow users to request a temporary access token for a database. The token is generated by a backend service that requires a master password. The plugin should show a form and then display the token. How should this plugin be built?
Select an answer first
2foundation · easy
Which of the following tasks is typically performed by a backend plugin in Backstage?
Select an answer first
3foundation · easy
How does a frontend plugin in Backstage typically obtain data from a backend plugin?
Select an answer first
4application · medium
A team wants to add a 'Deploy to Production' button to a service's overview page. The button should trigger a deployment via a backend plugin that calls an external orchestration API. What is the standard way for the frontend button to invoke the backend action?
Select an answer first
5expert · hard
A Backstage plugin needs to display a user's calendar events from Microsoft 365. The plugin must respect the user's permissions and not require a global service account. The team wants to avoid building a custom OAuth flow. What is the recommended approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CBA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “CBA” is a trademark of its owner, used for identification only.