Spring Cloud Risk Assessment & Management 5

Question 1

In Spring Cloud, which approach best mitigates the risk of a misconfigured Feign client causing all requests to fail silently?

Accepted Answer

Implementing a FallbackFactory that logs the cause and returns a safe default

Answer

FallbackFactory receives the exception that caused the fallback, allowing teams to log the root cause while returning safe defaults instead of propagating failures silently.

Question 2

A Spring Cloud microservice relies on Eureka for discovery but has no client-side retry configured. What failure scenario does this leave unaddressed?

Accepted Answer

Requests hitting a just-deregistered but still-cached stale Eureka entry

Answer

Eureka caches can briefly contain deregistered instances; without client-side retry, the single attempt to a stale entry fails with no automatic recovery to a healthy instance.

Question 3

Which Spring Cloud Config Server configuration reduces the risk of one team's config changes accidentally affecting another team's services?

Accepted Answer

Setting spring.cloud.config.server.git.searchPaths per application

Answer

Scoping Git search paths per application name ensures each service reads only from its designated directory, preventing cross-team configuration bleed.

Question 4

What is the primary risk of using default Resilience4j circuit breaker settings without tuning them to actual service SLAs?

Accepted Answer

Default thresholds may be too sensitive or too lenient for the service's real failure profile

Answer

Generic defaults like 50% failure rate threshold may trigger false opens on healthy services with bursty traffic or fail to protect against gradual degradation in stable services.

Question 5

In Spring Cloud Gateway, what security risk does a misconfigured CORS policy with allowedOrigins set to wildcard introduce?

Accepted Answer

Allows malicious websites to make authenticated cross-origin requests on behalf of users

Answer

Wildcard CORS origins allow any website to make cross-origin requests using the user's session credentials, enabling cross-site request forgery attacks from malicious domains.

Spring Cloud Practice Test

Spring Cloud Practice Test

Spring Cloud Risk Assessment & Management 5