Spring Cloud Risk Assessment & Management 3

Question 1

Which Spring Cloud Config feature reduces the risk of secrets being exposed in plaintext in a Git repository?

Accepted Answer

Symmetric or asymmetric property encryption

Answer

Spring Cloud Config supports encrypting sensitive values with {cipher} prefix using symmetric AES or asymmetric RSA keys, preventing plaintext secrets in Git.

Question 2

What is the risk of setting a very high slidingWindowSize in Resilience4j circuit breaker configuration?

Accepted Answer

Slow reaction to genuine failures because more samples are needed before threshold is reached

Answer

A large sliding window requires more failed calls before the failure rate exceeds the threshold, delaying circuit breaker activation and prolonging impact on callers.

Question 3

In Spring Cloud Gateway, which filter type is best suited to mitigate the risk of credential theft via insecure headers?

Accepted Answer

RemoveRequestHeader GatewayFilter

Answer

RemoveRequestHeader filter strips sensitive headers before forwarding requests to downstream services that do not need them.

Question 4

A Spring Cloud application uses @RefreshScope for dynamic config updates. What risk exists if refresh events are triggered too frequently?

Accepted Answer

Bean recreation storms causing temporary service unavailability

Answer

Frequent @RefreshScope triggers destroy and recreate all scoped beans simultaneously, which can cause request failures and thread pool exhaustion during the recreation period.

Question 5

Which Spring Cloud pattern most directly addresses the risk of a single slow downstream service causing thread pool exhaustion in the caller?

Accepted Answer

Bulkhead isolation with separate thread pools per dependency

Answer

Bulkhead pattern assigns a dedicated thread pool per dependency so a slow service only exhausts its own pool, not the caller's main pool.

Spring Cloud Practice Test

Spring Cloud Practice Test

Spring Cloud Risk Assessment & Management 3