Cross-cutting Concepts Flashcards

Which cross-cutting concern category includes audit logging, performance metrics collection, and health check endpoints?

Answer: Observability

Audit logs, metrics, and health checks all belong to observability — the cross-cutting concern of making a system's internal state and history visible to operators.

A software architect proposes using a shared exception hierarchy and a common error-handling framework. This addresses which architectural quality?

Answer: Consistency and maintainability across the codebase

A common exception hierarchy and error-handling framework reduce divergent error-handling patterns, improving consistency and long-term maintainability.

In a CPSA context, which technique decouples a cross-cutting concern from business logic by using declarative metadata (e.g., annotations)?

Answer: Decorator / annotation-driven programming

Annotation-driven decoration lets frameworks apply cross-cutting behavior (e.g., @Transactional, @Cacheable) without embedding that logic inside the business class itself.

Which cross-cutting strategy reduces the blast radius of a misconfigured or compromised service in a microservices system?

Answer: Principle of least privilege applied to service-to-service permissions

Least-privilege permissions limit what a compromised service can access, containing the damage to only the resources that service legitimately needs.

A CPSA architect is asked to ensure repeatable, deterministic deployments across all environments. Which cross-cutting practice best achieves this?

Answer: Immutable infrastructure combined with infrastructure-as-code

Immutable infrastructure with infrastructure-as-code ensures every environment is provisioned identically from version-controlled definitions, eliminating configuration drift.

Which cross-cutting mechanism prevents a slow database query from degrading the responsiveness of unrelated read operations in the same service?

Answer: Bulkhead pattern using separate thread pools or connection pools

The bulkhead pattern isolates resources (threads or connections) for different operation types so that saturation in one pool does not starve another.

When enforcing secure secret management as a cross-cutting concern, which practice is considered a baseline requirement by CPSA and modern security frameworks?

Answer: Storing secrets in a dedicated secrets manager and injecting them at runtime, never in source code

Secrets managers (e.g., HashiCorp Vault, AWS Secrets Manager) centralize secret storage and inject values at runtime, preventing secrets from appearing in source control.