Spring Framework Risk Assessment & Management 5

Question 1

Which risk does @Transactional on a private method in a Spring-managed bean introduce?

Accepted Answer

Spring's AOP proxy cannot intercept private methods, so the transaction annotation is silently ignored

Answer

Spring's proxy-based AOP only intercepts public methods called through the proxy; private methods are called directly on the target, bypassing transaction advice.

Question 2

In a Spring microservices architecture, which risk is introduced by using synchronous REST calls between all services?

Accepted Answer

Cascading failures: a slow or unavailable downstream service can block threads and bring down callers

Answer

Synchronous chaining means a single slow dependency can exhaust thread pools upstream, causing cascading failures across the entire call chain.

Question 3

Which Spring Cloud pattern directly mitigates the risk of cascading failures in a microservices system?

Accepted Answer

Circuit Breaker (e.g., Resilience4j) that opens when failure thresholds are exceeded

Answer

A Circuit Breaker stops forwarding requests to a failing service and returns a fallback, preventing thread exhaustion and failure propagation.

Question 4

What risk is introduced by setting spring.jpa.hibernate.ddl-auto=create-drop in a production Spring Boot application?

Accepted Answer

All database tables are dropped and recreated on every application restart, causing total data loss

Answer

create-drop instructs Hibernate to drop all tables when the SessionFactory closes, meaning a server restart will destroy all production data.

Question 5

Which risk does disabling Spring Security's default password encoding (using NoOpPasswordEncoder) introduce?

Accepted Answer

Passwords are stored in plain text, making a database breach immediately expose all user credentials

Answer

NoOpPasswordEncoder stores passwords as plain text; any attacker who reads the database immediately has all user passwords without needing to crack anything.

Spring Framework Practice Test

Spring Framework Practice Test

Spring Framework Risk Assessment & Management 5