CPSA Cross-cutting Concepts 4

Question 1

A CPSA architect documents that all services must emit metrics in the Prometheus exposition format. This is an example of enforcing which type of cross-cutting decision?

Accepted Answer

Observability standard

Answer

Mandating a common metrics format is an observability standard — a cross-cutting decision that ensures all services are uniformly monitorable.

Question 2

Which technique most effectively prevents SQL injection as a cross-cutting security concern in a data access layer?

Accepted Answer

Parameterized queries / prepared statements enforced in a shared data access library

Answer

Parameterized queries separate SQL code from data, eliminating injection risk when enforced centrally in a shared data access library across all services.

Question 3

In CPSA, Aspect-Oriented Programming (AOP) is most directly associated with implementing which type of concern?

Accepted Answer

Cross-cutting concerns such as logging and security

Answer

AOP was specifically designed to modularize cross-cutting concerns like logging, security, and transaction management that would otherwise be scattered throughout the codebase.

Question 4

Which cross-cutting practice ensures that a system can reconstruct its state after a failure by replaying events?

Accepted Answer

Event sourcing

Answer

Event sourcing stores every state change as an immutable event, allowing the system to replay events to reconstruct any past or current state after a failure.

Question 5

A team standardizes all inter-service timeouts to 500ms via a shared client library. Which cross-cutting quality attribute does this primarily protect?

Accepted Answer

Resilience, by preventing resource exhaustion from slow dependencies

Answer

Standardized timeouts prevent threads from blocking indefinitely on slow services, protecting system resilience by releasing resources promptly.

CPSA Exam Practice Test

CPSA Exam Practice Test

CPSA Cross-cutting Concepts 4