Spring Cloud Risk Assessment & Management 4

Question 1

A Resilience4j TimeLimiter is configured but no circuit breaker is applied to the same operation. What residual risk remains?

Accepted Answer

Repeated timeouts still accumulate and can exhaust thread resources without circuit breaking

Answer

TimeLimiter cancels individual slow calls but without a circuit breaker, each new call still attempts the downstream service, allowing thread accumulation during prolonged outages.

Question 2

In Spring Cloud, what is the security risk of exposing the Spring Boot Actuator /actuator/env endpoint without authentication?

Accepted Answer

Leaks all environment variables and configuration properties including potential secrets

Answer

The /actuator/env endpoint exposes all configuration properties and environment variables, which may include database passwords, API keys, and other sensitive values.

Question 3

Which Spring Cloud Gateway feature helps mitigate the risk of downstream services receiving oversized request payloads?

Accepted Answer

RequestSize GatewayFilter with a max size limit

Answer

The RequestSize GatewayFilter rejects requests exceeding a configured byte limit with a 413 status, protecting downstream services from large payload attacks.

Question 4

What risk does Spring Cloud Stream's consumer group configuration mitigate in an event-driven microservices architecture?

Accepted Answer

Duplicate message processing when multiple instances of the same service run

Answer

Consumer groups ensure only one instance within a group processes each message, preventing duplicate processing side effects when horizontally scaled services consume from the same topic.

Question 5

A team notices that Spring Cloud Config clients cache configuration for 0 seconds (no cache). What risk does this introduce?

Accepted Answer

Config server becoming a single point of failure bottleneck under high request load

Answer

With no config caching, every property access triggers a config server call, making the config server a high-traffic bottleneck and single point of failure for all property reads.

Spring Cloud Practice Test

Spring Cloud Practice Test

Spring Cloud Risk Assessment & Management 4