WorksheetsSystem Faults and Failures Quiz
Total questions: 108
Worksheet time: 54mins
What is a system fault?
A system fault is an unexpected shutdown due to software errors.
A system fault is a runtime problem that occurs during a system’s operations that does not necessarily result in a failure.
A system fault is a software bug that causes minor user interface issues.
A system fault is a network anomaly that briefly disrupts communications.
What is a system failure?
A system failure occurs when backup systems engage due to a power failure.
A system failure occurs when the system is unable to deliver one or more of its designed services to the users.
A system failure happens when scheduled maintenance takes longer than expected.
A system failure arises from hardware malfunction requiring replacement.
How can a fault be prevented from becoming a failure?
A fault can be prevented from becoming a failure by regular system upgrades.
A fault can be prevented from becoming a failure if masked by some recovery or preventative measure.
A fault can be prevented from becoming a failure through continuous user training.
A fault can be prevented from becoming a failure by immediate and automatic system shutdown.
Which are the three categories of availability tactics?
Availability tactics include Monitoring, Maintaining, and Modifying system components.
Availability tactics include Detecting, Recovering, and Preventing system faults.
Availability tactics involve Observing, Optimizing, and Overhauling operational procedures.
Availability tactics encompass Evaluating, Executing, and Enhancing security measures.
How does the Monitoring Agent help detect system faults?
The Monitoring Agent helps detect system faults by analyzing performance metrics.
The Monitoring Agent helps detect system faults by monitoring the equipment or software.
The Monitoring Agent helps detect system faults by logging error messages.
The Monitoring Agent helps detect system faults by tracking system resource usage.
What does the Monitoring Agent do to help recover from system faults?
The Monitoring Agent helps recover by implementing fallback procedures.
The Monitoring Agent helps recover by taking steps to restore system functionality.
The Monitoring Agent helps recover by coordinating with backup systems.
The Monitoring Agent helps recover by isolating and addressing the affected components.
How does the Monitoring Agent prevent system faults?
The Monitoring Agent prevents faults by continuously updating software.
The Monitoring Agent prevents faults by monitoring trends that indicate potential issues.
The Monitoring Agent prevents faults by enforcing strict operational protocols.
The Monitoring Agent prevents faults by regular hardware inspections and replacements.
What are the three fault detection tactics mentioned?
Fault detection tactics include Ping/Echo, Heartbeat, and Exceptions.
Fault detection tactics involve Monitoring, Logging, and Analyzing.
Fault detection tactics encompass Scanning, Tracking, and Observing.
Fault detection tactics consist of Evaluating, Reporting, and Resolving.
What is the Ping/Echo tactic?
The Ping/Echo tactic involves a two phase protocol with a ping and a response echo.
The Ping/Echo tactic is a method where a system sends a ping to test network response.
The Ping/Echo tactic is used for detecting active components by sending a ping signal.
The Ping/Echo tactic employs a periodic ping to ensure components are functioning.
What is a Heartbeat in fault detection tactics?
A Heartbeat is a single message sent periodically to check system status.
A Heartbeat is a continuous signal sent to monitor network health.
A Heartbeat is a routine check performed by the system to ensure connectivity.
A Heartbeat is a status alert sent by systems to confirm operational stability.
When does the agent in a Heartbeat Detection Tactic detect a component failure?
The agent detects a component failure when it observes a decrease in the frequency of the heartbeat.
The agent detects a component failure when it stops receiving the component's heartbeat.
The agent detects a component failure when the quality of the heartbeat signal degrades.
The agent detects a component failure when the timing of the heartbeat varies unpredictably.
What is an Expection in fault detection tactics?
An Expection is a method of enhancing the system's response to faults.
An Expection is a method of signaling a detected fault.
An Expection is a procedure for rebooting the system upon detecting a fault.
An Expection is a technique for logging faults in the system's operational log.
What relationship exists between Exceptions and Handlers?
Handlers are routinely checked in response to the exception to ensure system stability.
Handlers are executed in response to the exception and perform some behavior designed to address or mitigate the effects of the fault.
Handlers are bypassed when an exception is raised, indicating a critical system error.
Handlers are archived along with exceptions for system analysis and troubleshooting.
Which detection tactic requires a two phase exchange of messages between the monitoring agent and the component being monitored?
The two phase exchange tactic known as Exceptions requires detailed message exchanges.
The two phase exchange tactic known as Heartbeat involves complex communication.
The two phase exchange tactic known as Ping/Echo requires detailed message exchanges.
The two phase exchange tactic known as Monitoring involves periodic updates.
Which detection tactic does not require a monitoring agent to implement?
The Heartbeat detection tactic does not require a monitoring agent because it is automated.
The Exceptions detection tactic does not require a monitoring agent because they are generally used to detect and act on faults internally.
The Ping/Echo detection tactic does not require a monitoring agent due to its self regulating design.
The Monitoring detection tactic does not require a monitoring agent because it uses existing infrastructure.
What is a "Trend" in terms of a monitoring agent's operation?
A trend is a predictive analysis used by the agent to anticipate future system behaviors.
A trend is a series of measurements taken at regular intervals over time, which are used to monitor for indicators of potential faults in a system's operation.
A trend is a statistical method used by agents to evaluate the efficiency of system processes.
A trend is a diagnostic routine implemented by the agent to continuously assess system performance.
How might a monitoring agent use a trend in its operations?
A monitoring agent might use a trend to plan system upgrades and enhancements.
A monitoring agent uses trends to detect anomalies or changes over time that could indicate potential equipment failures.
A monitoring agent might use a trend to configure system settings for optimal performance.
A monitoring agent uses trends to generate regular reports for system administrators.
How does the use of trends aid in fault prevention?
Trends aid in fault prevention by providing historical data for benchmarking system performance.
Trends aid in fault prevention by identifying early signs of system problems before they develop into more serious faults or failures.
Trends aid in fault prevention by facilitating scheduled downtime for maintenance based on predicted failures.
Trends aid in fault prevention by enabling the agent to shut down systems preemptively before faults occur.
What is the purpose of the Voting Tactic in fault detection?
The Voting Tactic is used to elect the most reliable system component as the leader in fault management.
The Voting Tactic is used to determine the majority opinion in user feedback on system performance.
The Voting Tactic is used to ensure reliability in process monitoring by using multiple processors and ignoring outputs that differ from the majority.
The Voting Tactic is used to decide which system updates to implement based on component consensus.
In which applications is the Voting Tactic typically used?
The Voting Tactic is typically used in consumer electronics for performance enhancement.
The Voting Tactic is typically used in data centers for load balancing.
The Voting Tactic is typically used in highly critical, real time applications like aircraft flight control systems.
The Voting Tactic is typically used in educational software for quiz assessments.
What role does the “voter” component play in the Voting Tactic?
The voter component aggregates data from various sources to provide a comprehensive system report.
The voter component filters out corrupted data to ensure data integrity.
The voter component compares the outputs from multiple processors and identifies any that are faulty by detecting deviations from the majority.
The voter component optimizes the decision making process by implementing machine learning algorithms.
Why are at least three processors required in the Voting Tactic?
At least three processors are required to distribute the computational load evenly.
At least three processors are required to allow a majority decision, ensuring system functionality even if one processor fails.
At least three processors are required to maintain data redundancy and backup.
At least three processors are required to enhance the security of the processing and data.
What happens if a processor's output differs from others in the Voting Tactic?
If a processor's output differs from others, it triggers an automatic system reboot.
If a processor's output differs from others, that processor is considered failed, and its output is ignored to maintain system integrity.
If a processor's output differs from others, it undergoes a real time debugging process.
If a processor's output differs from others, it logs the discrepancy for later analysis.
What is active redundancy in fault tolerance?
Active redundancy involves multiple processors handling the same requests independently to enhance data processing.
Active redundancy involves 2+ processors handling the same requests simultaneously, with the client using the first valid response and ignoring others.
Active redundancy involves multiple processors performing the same tasks in a sequential manner to ensure accuracy.
Active redundancy involves using additional software layers to back up data continuously.
How does passive redundancy work?
Passive redundancy uses multiple active systems working in parallel to provide a seamless user experience.
Passive redundancy uses an active processor and standby processor(s). The standby only becomes active when the primary processor fails, taking over the request processing.
Passive redundancy involves the automatic duplication of all tasks to prevent data loss.
Passive redundancy ensures all data is stored in three different locations for security purposes.
What happens in active redundancy if a processor faults?
It is immediately replaced with a new one without affecting the system.
Faulted processors do not respond to client requests, and only functioning processors continue to handle requests.
The system temporarily suspends all operations to prevent data corruption.
All data processing is paused until the fault is investigated.
What triggers the standby processor in passive redundancy?
It is activated during regular maintenance cycles.
It is activated when the system undergoes an upgrade.
It is activated when a monitoring agent detects that the active processor has faulted.
It is activated when there is an increase in system demand.
Compare the response handling between active and passive redundancy.
In active redundancy, all processors respond to requests as they are received; in passive redundancy, standby processors respond only if active processors are overloaded.
In active redundancy, all processors respond independently and simultaneously; in passive redundancy, standby processors respond only if the active processors fail.
In active redundancy, the first valid response is used and others are ignored; in passive redundancy, only the primary processor's response is considered.
In active redundancy, responses are generated after consensus; in passive redundancy, only the primary processor's response is considered.
What is a detection tactic in a fault tolerant system?
It involves the routine assessment of all system logs for errors.
It involves identifying a faulted processor or component, such as using ping/echo or heartbeat methods to notice failures.
It involves deploying security measures to prevent unauthorized access.
It involves constant monitoring of user interactions to ensure compliance with system protocols.
What is a recovery tactic in the context of fault tolerance?
It involves the routine inspection and repair of all system components.
It aims to mask the fault from the overall system and maintain functionality, such as using passive redundancy to take over operations after a fault is detected.
It involves enhancing the system's ability to prevent faults through advanced predictive algorithms.
It includes implementing strict security protocols to avoid faults caused by external threats.
How can fault detection and failure recovery tactics be used together?
They are used together by synchronizing system updates and maintenance schedules.
The system detects a fault using methods like ping/echo, then activates a recovery strategy like passive redundancy to continue operations despite the fault.
Fault detection and failure recovery tactics are integrated through user training programs to minimize human errors.
They work together by automating the data backup process immediately after a fault is detected.
Provide an example of using both detection and recovery tactics in a fault tolerant system.
An example is a system that uses real time data analysis to detect faults and then switches to a secure mode to prevent data loss.
An example is a system that utilizes heartbeat fault detection to identify a fault and then employs passive redundancy, where a standby component takes over, ensuring continuous service.
An example is a network that detects intrusions through continuous monitoring and immediately initiates a firewall upgrade to block the intruder.
An example is a database system that detects data corruption and automatically restores data from a backup.
How can a new or restarted processor synchronize its state using inter process communication?
The new processor can request the current state from the remaining active processors using network messages or other forms of inter process communication.
The new processor automatically downloads the latest software version to match the rest of the system.
The new processor uses a central server to fetch the latest configuration files.
The new processor performs a self diagnostic to determine the optimal state before joining the network.
What is an alternative method to synchronize the state of a processor in a cluster without direct requests to other processors?
The processor's state can be automatically updated through a distributed ledger technology like blockchain.
The processor's state can be maintained, accessed, and recovered from a shared repository like a database or replicated cache that all processors in the cluster use.
The processor uses a peer to peer network to indirectly synchronize with other processors.
The processor relies on a master control unit that periodically updates all processors in the cluster.
Why might a system use a shared repository for state synchronization in a cluster?
A shared repository simplifies the management of user permissions across the cluster.
A shared repository ensures that all processors have access to the same current state information, facilitating consistency and reliability in state recovery.
A shared repository reduces the overall cost of system maintenance.
A shared repository increases the processing speed of individual processors.
What are the three categories of modifiability tactics in software architecture?
Tactics to enhance usability, improve performance, and reduce cost.
Tactics to minimize the negative effects of future system changes through extension points, reduce coupling between components, and use of architectural patterns that enhance modifiability.
Tactics for security enhancement, data integrity, and user interface customization.
Tactics for code optimization, load balancing, and memory management.
What is the purpose of using extension points in modifiability tactics?
The purpose is to provide checkpoints during system operation for performance tuning.
The purpose is to accommodate future changes to the system without major modifications, minimizing the negative effects of these changes.
The purpose is to enable real time updates to the system without downtime.
The purpose is to streamline user access to system upgrades.
How do modifiability tactics that reduce component coupling benefit software design?
Reducing coupling between components facilitates easier and quicker software updates.
Reducing coupling between components makes the system easier to modify, as changes in one component are less likely to require changes in others.
Reducing coupling between components enhances the security of the software by isolating components.
Reducing coupling between components allows for more efficient data processing.
What is the bridge pattern in software design?
The bridge pattern involves using a third party service to mediate interactions between different software components.
The bridge pattern involves an intermediary object that connects existing clients to a modified service interface, translating old interface calls to new interface methods without requiring client modifications.
The bridge pattern uses a modular framework to allow various components to communicate seamlessly.
The bridge pattern implements a redundancy system that ensures high availability and fault tolerance.
How does the bridge pattern facilitate software updates?
The bridge pattern facilitates software updates by allowing legacy systems to operate without modifications.
The bridge pattern facilitates software updates by creating a separation layer that isolates changes to one part of the system.
The bridge pattern facilitates software updates by automatically adapting old code to meet new system requirements.
The bridge pattern facilitates software updates by allowing a new version of a service to be deployed and used while keeping the old version operational, enabling a gradual migration to the new interface without disrupting existing clients.
What is an extension point in software design?
An extension point is a routine check within software that ensures all extensions are compatible with the main program.
An extension point is a feature in a design that facilitates the future integration of new features with minimal impact on the existing system.
An extension point is a gateway in the software that allows external services to connect and interact with the core system.
An extension point is a protocol in software architecture that dictates how components should communicate.
When should extension points be implemented in a system's design?
Extension points should be implemented at the end of the development cycle to address any remaining integration issues.
Extension points should be implemented during the testing phase to evaluate their impact on system performance.
Extension points should be implemented during the initial design phase but are meant for integrating features that will be developed in future system releases.
Extension points should be added as needed when system expansions or upgrades are planned.
Give an example of how extension points can be used in software design.
Extension points can be used in software design to allow for the installation of third party plugins that enhance functionality.
Extension points can be used in software design to facilitate the deployment of updates without downtime.
Extension points can be used in software design to integrate different programming languages within the same application.
An interface with a stub implementation could be used as an extension point, allowing new services identified in the current system analysis to be easily added in future versions without disrupting existing functionality.
What are three design patterns suitable for implementing resource management tactics?
Singleton Pattern, Factory Method Pattern, Object Pool Pattern
Observer Pattern, Strategy Pattern, Decorator Pattern
Composite Pattern, Command Pattern, Chain of Responsibility Pattern
Prototype Pattern, Builder Pattern, Adapter Pattern
Describe the Factory Method pattern.
The Factory Method pattern is a structural pattern that ensures only one object of a particular class is ever created.
The Factory Method pattern allows a class to defer instantiation to subclasses, providing a way for a client to create objects without specifying the exact class of object that will be created.
The Factory Method pattern is a behavioral pattern that changes the behavior of an object at runtime depending on its state.
The Factory Method pattern is a concurrency pattern used to manage multiple threads in a software application.
What is the primary characteristic of a Singleton in resource management?
A Singleton pattern ensures that a class has multiple instances to distribute workload efficiently.
A Singleton pattern ensures that a class has only one instance across the entire system, and this instance is shared and accessible globally.
A Singleton pattern allows for the creation of any number of instances but controls access through a single access point.
A Singleton pattern creates a unique instance of a class for each module of the system to avoid conflicts.
How does the Object Pool pattern manage resources?
The Object Pool pattern manages resources by allowing objects to be created once and shared among multiple components.
The Object Pool pattern manages resources by preemptively loading all necessary objects at system startup.
The Object Pool pattern maintains a pool of initialized objects that can be checked out, used, and returned by different clients, managing expensive resource allocation efficiently.
The Object Pool pattern manages resources by dynamically allocating and deallocating them based on current system demand.
What is a key difference between Singleton and Object Pool patterns in terms of thread safety?
Singleton objects must be thread safe if multiple threads access them, as there is only one shared instance; in contrast, Object Pools manage multiple instances and must ensure that no two threads access the same object instance simultaneously.
Singleton patterns do not require thread safety measures as they are not accessed by multiple threads simultaneously, unlike Object Pools which require rigorous thread management.
Singleton patterns are inherently thread safe due to their static nature, whereas Object Pools require additional synchronization to handle concurrent accesses.
Object Pools are always thread safe as they provide each thread with its own object instance, unlike Singletons which may cause data corruption if accessed simultaneously.
How do Singleton and Object Pool patterns differ in handling expensive resources?
Singletons focus on minimizing the number of instances to reduce memory usage, while Object Pools aim to optimize resource utilization by reusing object instances.
Singletons use a lazy instantiation strategy for resource management, while Object Pools use an aggressive pre loading strategy.
Singletons do not inherently manage resource initialization costs beyond ensuring a single instance, while Object Pools specifically handle the lifecycle of multiple expensive resources like database connections, optimizing usage and allocation.
Singletons are ideal for managing high cost resources in low frequency scenarios, whereas Object Pools are better suited for high demand environments requiring rapid resource turnover.
What is "Quality of Service" coupling in software design?
Quality of Service coupling occurs when a client relies on another service to provide essential operational data.
Quality of Service coupling occurs when the correct operation of a client depends on the server's performance, accuracy, or frequency.
Quality of Service coupling happens when the system's output quality directly affects the user interface complexity.
Quality of Service coupling is determined by the speed at which a server processes requests from a client.
Define "Location of" coupling.
Location of coupling occurs when software components are deployed on different servers.
Location of coupling happens when a client object cannot operate until it locates and references a server object.
Location of coupling is identified when components must be physically close to interact efficiently.
Location of coupling refers to the geographical distribution of system databases.
What does "Sequence Of" coupling entail?
Sequence Of coupling involves a predefined order of operations that must be followed for the system to function correctly.
Sequence Of coupling arises when the operation of a server component is dependent on the order in which its services are accessed.
Sequence Of coupling occurs when tasks must be completed in a specific sequence to maintain data integrity.
Sequence Of coupling requires that all system events occur in a chronological order to avoid errors.
Explain "Semantics Of" coupling.
Semantics Of coupling refers to the need for components to share a common language or protocol to communicate.
Semantics Of coupling occurs when components need to be aware of each other’s roles within the system.
Semantics Of coupling is when the use of an interface by a service requires understanding not provided in the interface alone.
Semantics Of coupling happens when the system’s functionality is dependent on the underlying database schema.
How can the design of a Tax Calculation system be improved to reduce coupling?
By redesigning the system to accept necessary values like zipcode and price directly as parameters, rather than coupling with Customer and Purchase classes to get these values.
By integrating more comprehensive data validation steps to ensure all inputs are correctly processed.
By implementing a more robust error handling system that prevents failures from affecting overall performance.
By creating a more dynamic interface that allows for real time updates based on user interactions.
What is the Builder's primary role in the Dependency Injection Container pattern?
The Builder’s primary role is to manage dependency graphs and ensure that all components are loosely coupled.
The Builder’s primary role is to construct the system from a configuration file, detailing the composition of clients and servers and their interactions.
The Builder’s primary role is to monitor the system's performance and adjust dependencies accordingly.
The Builder’s primary role is to optimize the codebase to reduce the overhead associated with managing dependencies.
What are the three steps the Builder follows in the Dependency Injection Container pattern?
Create service instances and maintain references to each, create client instances, described with the services they need, and connect (inject) the server instances into the client instances as references.
Define all possible service configurations, link services to their respective clients, and deploy the configuration to the production environment.
Analyze system requirements, design the dependency structure, and implement the dependencies in a modular fashion.
Identify key components, establish connections between them, and test the integrated system for efficiency.
How does the Builder create client instances in a Dependency Injection Container?
The Builder creates client instances based on user requirements and business logic embedded in the system.
The Builder creates client instances by cloning existing configurations to ensure consistency.
The Builder creates client instances based on the configuration that specifies each client's required services to fulfill their responsibilities.
The Builder generates client instances dynamically during runtime to adapt to changing system demands.
What does the Builder do after creating service and client instances in the Dependency Injection Container pattern?
After creating the instances, the Builder optimizes the service instances for performance and then links them to the client instances.
After creating the instances, the Builder injects the server instances into the client instances as references, establishing operational dependencies.
After creating the instances, the Builder performs rigorous testing to ensure all dependencies are functioning as expected.
After creating the instances, the Builder documents the configuration and prepares the system for deployment.
Why is the configuration file important in the Dependency Injection Container pattern?
The configuration file is crucial as it guides the automated testing procedures that verify the interactions between components.
The configuration file is crucial as it contains all the information about the system's structure, including client server relationships and service dependencies, which the Builder uses to assemble the system.
The configuration file is used to manage security settings and access controls for the system.
The configuration file acts as a backup to restore system settings in case of failure.
What is typically the bounding factor in a system's performance?
The processor's computing power is typically the bounding factor in a system’s performance.
The amount of available storage space is typically the bounding factor in a system’s performance.
I/O (Input/Output) operations, including data transfer from disks, network connections, and serial devices, are often the performance bottleneck due to their slower speed compared to the processor.
The user interface responsiveness is typically the bounding factor in a system’s performance.
What is the primary purpose of a memory cache in a system's design?
The primary purpose of a memory cache is to secure data by storing it temporarily in a high speed storage medium.
The primary purpose of a memory cache is to maintain copies of persisted objects to avoid repeated disk reads each time an object is requested, thereby enhancing system performance by reducing slow disk access.
The primary purpose of a memory cache is to distribute processing load evenly across the system.
The primary purpose of a memory cache is to manage user sessions and store temporary user data.
What is a major problem associated with caching data in a memory cache?
A major problem is the high cost of maintaining large memory caches.
A major problem is the risk of data becoming stale. When the original data on disk is modified, the cached data may not reflect these updates, leading to inconsistencies.
A major problem is the excessive energy consumption by memory caches.
A major problem is the physical space required to install sufficient memory caching hardware.
How do cache implementations manage the limitation of system memory?
Cache implementations manage memory limitations by compressing data stored in the cache.
Cache implementations manage memory limitations by prioritizing the storage of frequently accessed data.
Cache implementations manage memory limitations by using virtual memory techniques.
Cache implementations manage memory limitations by restricting the number of objects they can hold, often removing old objects to make space for new ones when the cache reaches its capacity.
What does LRU stand for and how does it function in cache management?
LRU stands for Least Recently Used. It functions by prioritizing the retention of the most frequently used items in the cache.
LRU stands for Least Recently Used. It functions by removing the least recently accessed item from the cache when new data needs to be added, ensuring the cache only contains frequently accessed data.
LRU stands for Last Reused Utility. It functions by periodically refreshing items based on their access patterns.
LRU stands for Latest Retrieval Update. It functions by updating the retrieval times of items to manage cache deletions effectively.
How is LRU implemented in cache systems?
LRU is implemented by tagging each cache entry with a usage frequency count and removing the least frequently used entries first.
LRU is implemented by associating each cache entry with a timestamp updated upon access. The entry with the oldest timestamp, indicating least recent use, is removed when the cache needs space.
LRU is implemented by creating a queue of cache entries, with the oldest entries being moved to the front and removed first.
LRU is implemented by a scoring system where each cache entry is scored based on time and frequency of access, with lower scores being removed first.
What are two resource demand tactics to manage if the system's capacity is exceeded by the demand?
Reduce the rate of delivery of nonessential events to preserve capacity for essential events; if event delivery cannot be controlled, filter nonessential events to the extent possible to free up processing capacity.
Increase the processing power instantly; if that is not possible, shut down non critical system functions temporarily.
Enhance the system's bandwidth; alternatively, reroute traffic through less congested network paths.
Deploy additional servers; if not feasible, implement a queueing system to manage access.
What are two general methods to manage system resource demands?
Increase the efficiency of the transaction to reduce the demand on CPU, memory, and I/O; increase the system resources available for processing transactions, such as upgrading hardware.
Limit the number of user connections; offer premium access for high demand periods.
Implement stricter access controls; optimize the user interface to reduce data transmission.
Restructure the database to reduce query times; provide additional training for users to reduce inefficient operations.
How can the efficiency of a system's transactions be increased to manage resource demands?
By optimizing event handling code or utilizing a memory cache to decrease slow disk I/O operations.
By rewriting the system's core algorithms to streamline processes.
By implementing faster network protocols.
By upgrading the user interfaces to reduce the computational load.
What can be done to increase system resources for better transaction processing?
System resources can be increased by integrating more robust software solutions.
System resources can be increased by upgrading to a faster processor, adding more system memory, or installing faster storage solutions like SSDs.
System resources can be increased by expanding the physical infrastructure, such as adding more servers.
System resources can be increased by outsourcing some of the processing to cloud services.
What are the two types of testing described in system testability tactics?
Performance Testing and Security Testing.
Unit Testing, which tests individual classes or components, and Integration Testing, which tests the system as an integrated, functioning whole.
Regression Testing and Acceptance Testing.
Automated Testing and Manual Testing.
Which type of testing is used to check if the system meets its non functional requirements, such as performance or security?
Functional testing is used to ensure the system meets its non functional requirements.
Non functional testing, which is typically part of integration testing, is used to determine whether the system meets its non functional requirements.
Stress testing is exclusively used to check non functional requirements like performance and security.
Usability testing is specifically designed to assess non functional requirements such as performance and security.
What HTTP status code is appropriate if the service requested by the client is not found?
500 Internal Server Error.
401 Unauthorized.
404 Not Found.
302 Found.
Which HTTP status code indicates that the service was successfully invoked and the response contains the requested information?
200 OK.
202 Accepted.
204 No Content.
301 Moved Permanently.
What status code should be returned when a client lacks the credentials to access a requested service?
400 Bad Request.
403 Forbidden.
401 Unauthorized.
404 Not Found.
Which HTTP status code is used when the client fails to authenticate with the server?
403 Forbidden.
401 Unauthorized.
500 Internal Server Error.
407 Proxy Authentication Required.
What HTTP status code is used when a request to create an object is successful?
201 Created
200 OK
202 Accepted
204 No Content
What two pieces of information does a client need to establish a socket connection?
The client needs the protocol type and the data format.
The client needs the network address of the machine hosting the service and the port number the service is listening on.
The client requires the username and password for authentication.
The client requires the server's physical location and operating system.
What are the three parts of an HTTP response message?
The three parts are the Request Line, Request Headers, and Request Message Body.
The three parts are the Status Line, Response Headers, and Response Message Body.
The three parts are the Method, Path, and Protocol.
The three parts are the Header, Cookie, and Metadata.
Where in the HTTP response is the size of the response message contained?
The size of the response message is specified in the Status Line.
The size of the response message is specified in the Response Headers under the 'Content Length' header.
The size of the response message is noted at the end of the Response Message Body.
The size of the response message is included in the initial request parameters.
In which part of an HTTP response is the data of the server's response contained?
The data is contained in the Response Headers.
The data is contained in the Status Line.
The data is contained in the Response Message Body.
The data is contained in the Cookies.
How can RESTful services ensure secure communication over the internet?
RESTful services ensure secure communication by using SSL (Secure Socket Layer) for encrypted data transfer.
RESTful services ensure security by requiring two factor authentication for all data transfers.
RESTful services use proprietary algorithms to encrypt data communications.
RESTful services rely on private networks instead of the public internet for data transfer.
What method can RESTful services use to authenticate a client's identity?
RESTful services use client side certificates to verify a client's identity.
RESTful services authenticate a client's identity using CAPTCHA systems.
RESTful services can use HTTP Basic Authentication to verify a client's identity.
RESTful services utilize biometric data for client authentication.
How do RESTful services handle stateful interactions such as shopping carts?
RESTful services handle stateful interactions by using persistent cookies that store user data across sessions.
Despite HTTP being stateless, RESTful services handle stateful interactions by using session data stored on the server, linked to the client through cookies containing session IDs.
RESTful services manage stateful interactions by maintaining a permanent connection between the client and server.
RESTful services use a client side database to track stateful interactions.
How is information encoded and transferred between client and server in RESTful services?
Information is encoded and transferred using proprietary encoding schemes specific to the server's architecture.
Information is encoded and transferred typically in formats like JSON or XML within the body of HTTP requests and responses.
RESTful services use asynchronous data transfer methods to encode and send information.
Information is encoded in binary format to ensure speed and efficiency during transfer.
What does DevOps stand for and what does it integrate?
DevOps stands for Development Operations, integrating software development with data operations.
DevOps stands for Software Development and Operations, integrating both development and operations activities into a single software development process.
DevOps represents Device Operations, focusing on integrating hardware operations into software development.
DevOps stands for Development and Organizational Procedures, focusing on the integration of corporate practices into software development.
What does YBI YRI mean in the context of DevOps?
YBI YRI stands for "You Build It, You Run It," emphasizing that developers are responsible for both building and managing the applications they create.
YBI YRI means "Your Business, Your Responsibility," indicating that businesses are solely responsible for their technological investments.
YBI YRI represents "Yes, But It's Your Risk Involved," a caution about the risks in software deployment.
YBI YRI is "Your Build Integrates Your Requirements," focusing on the customization of software builds.
List three advantages of DevOps.
DevOps offers faster project completion, lower costs, and improved hardware utilization.
DevOps provides agile development and deployment processes, responsiveness to customers' needs, and produces higher quality applications with fewer bugs.
DevOps enhances security, simplifies compliance, and increases marketing speed.
DevOps supports remote work, reduces software size, and enhances user interface design.
What is a TCP socket and how is it used in computing?
A TCP socket is a protocol for transferring files between computers in a network, typically used in large data transfers.
A TCP socket is a two way communication channel used by two processes, typically on different machines, to communicate over a network. It allows for continuous data exchange once connected.
A TCP socket is a security feature in network communications that encrypts data packets to prevent interception.
A TCP socket is a hardware component that connects a computer's motherboard to the internet.
How does a TCP socket function in terms of data streams?
Each TCP socket has an input and an output stream. Data sent by one process enters the input stream of the other process and vice versa, facilitating two way communication.
TCP sockets function by using a single data stream for both sending and receiving data, which optimizes network traffic.
TCP sockets operate using multiple data streams to segregate different types of data, enhancing security and efficiency.
TCP sockets use a cyclic data stream that recycles network resources to maintain a continuous connection.
What mechanism is used to synchronize a receiving process with a sending process over sockets?
Synchronization is achieved through the blocking nature of sockets, where a receiving process will block (pause execution) until data is available to be read from its input stream, ensuring the data is processed in the order it's received.
Synchronization between sending and receiving processes is maintained by a timing mechanism that schedules data transfers at regular intervals.
A handshaking mechanism is used, where both processes must acknowledge data receipt before further data can be sent.
Synchronization is handled by a dedicated synchronization server that coordinates the data flow between sockets.
What is the primary challenge of securely transmitting messages over the internet?
The main challenge is the risk of data being corrupted due to inconsistent internet speeds.
The primary challenge is the computational overhead associated with encrypting and decrypting messages.
The main challenge is the risk of a Man In The Middle (MITM) attack, where an unauthorized entity can intercept and observe messages as they travel over an inherently insecure network channel.
The biggest challenge is ensuring that the message reaches its intended recipient without being sent to incorrect addresses.
How is the problem of secure message transfer generally solved?
Secure message transfer is generally achieved by using advanced compression techniques to make messages less detectable.
Secure message transfer is generally achieved by encrypting messages before they are sent over the network, turning them into unintelligible cipher text that only the intended recipient can decrypt using a key.
The problem is solved by routing messages through private networks that are isolated from the public internet.
Secure message transfer is ensured by sending duplicate messages through different routes to confuse potential interceptors
Describe how symmetric Single Key Encryption works.
In symmetric encryption, different keys are used for encrypting and decrypting the message, which enhances security.
In symmetric encryption, the same key is used for both encrypting and decrypting the message. The sender uses this key to encrypt the message, and the receiver uses the same key to decrypt it.
Symmetric encryption uses a single, unchanging key that is embedded in the encryption software used by both the sender and receiver.
Symmetric Single Key Encryption works by automatically generating a unique key for each message, which expires once the message is decrypted.
What is the key problem with using symmetric encryption for secure message transfer?
The key problem is the computational cost associated with generating secure encryption keys.
The key problem is the difficulty in managing key distribution securely; both the sender and recipient need the key, but sending it over an insecure channel can expose it to interception by a MITM.
The key problem is that symmetric encryption is not strong enough to withstand modern decryption techniques used by hackers.
The key problem is the lack of scalability, as each new communication channel requires a unique key.
How are public and private keys used to encrypt data?
The public key is used to encrypt data, turning it into cipher text that only the corresponding private key can decrypt. This ensures that the data can be safely transmitted over insecure channels.
The private key encrypts the data, and the public key is used by anyone to decrypt it, ensuring that the data remains confidential.
Both public and private keys are used simultaneously to encrypt data, which then requires a third, shared key to decrypt.
Public keys encrypt metadata, while private keys encrypt the actual content of messages for enhanced security.
How does public private key encryption (PPK) solve the key distribution problem?
Public private key encryption allows for keys to be exchanged over a secure channel, which is established using traditional encryption methods.
Public keys can be freely distributed without compromising security, allowing anyone with the public key to encrypt data for the holder of the private key, who alone can decrypt it using their private key.
PPK uses a key exchange algorithm that securely sends private keys over the internet without the need for a public key.
Public private key encryption uses a digital signature to authenticate the public key before exchanging the private key.
Why is Shared Key Encryption (AES) still needed when PPK is available?
Although PPK provides a secure method for key exchange and encryption, it is computationally expensive and slow. AES (a form of shared key encryption) is used because it's much faster and suitable for encrypting large amounts of data efficiently.
Shared Key Encryption is more secure than PPK and is used for top secret communications.
AES is required for legacy systems that are not compatible with PPK.
Shared Key Encryption, like AES, operates independently of internet connectivity, unlike PPK, which requires a constant connection.
What is message authentication and how is it accomplished using PPK?
Message authentication verifies that a message comes from a claimed sender. In PPK, this is accomplished by the sender 'signing' a message with their private key, and the recipient can use the sender’s public key to verify the signature, confirming the message’s integrity and origin.
Message authentication ensures the message has not been altered in transit, achieved in PPK by embedding a timestamp in each encrypted message.
PPK uses a checksum to authenticate messages, which is verified against a database of known checksums.
Message authentication in PPK is handled through an external certification authority that validates each message sent and received.
How does PPK enable both encryption and message authentication?
PPK enables both encryption and message authentication by using dual keys that serve different functions: the public key for encryption and the private key for decryption and digital signatures.
PPK allows a user to encrypt messages with the recipient's public key and sign messages with their own private key. This enables secure message transfer and verification of the sender's identity through the public key infrastructure.
PPK uses a hybrid approach combining symmetric and asymmetric keys to provide encryption and authentication seamlessly.
PPK enables encryption and authentication by incorporating third party verification into each data transfer, ensuring both security and integrity.
What is the primary security function of SSL (Secure Socket Layer)?
The primary function of SSL is to provide a secure channel for data transmission by using digital certificates to authenticate the identity of the parties.
SSL secures a TCP connection by encrypting information sent over the network, preventing man in the middle attacks where an attacker could intercept and read the data.
SSL's primary function is to speed up secure communications by compressing data before encryption.
The main function of SSL is to ensure data integrity by checking that data transferred over the network has not been altered.
What are the four steps involved in establishing an SSL connection?
The four steps are: The client and server agree on SSL protocol version, exchange security capabilities, authenticate each other using certificates, and use symmetric encryption for data transfer.
The steps include: The client requests an SSL connection from the server, the server sends the client a signed certificate containing the server's public key, the client uses the public key to encrypt a symmetric key and sends it back to the server, and the server decrypts the symmetric key using its private key, establishing a secure communication channel.
The steps are: The server presents its SSL certificate to the client, the client verifies the certificate with a known certificate authority, a session key is generated and shared between the client and server, and data transfer begins.
The process involves: The client sends a request for an SSL handshake, the server responds with a list of supported encryption algorithms, the client selects an encryption method, and both parties exchange keys and begin data transfer.
What defines a public network versus a private network?
A public network is defined by its open access and availability to the general public, whereas a private network is restricted to specific users or groups.
Public networks use IP addresses that are accessible over the internet, while private networks use IP addresses that are not routable on the internet, typically for internal use within organizations.
A public network allows all forms of data transfer without restrictions, while a private network limits the types of data that can be exchanged.
Public networks are maintained by governmental organizations, whereas private networks are maintained by private entities.
What is the purpose of a firewall in network security?
The purpose of a firewall is to monitor and manage the data storage across different network segments.
A firewall's purpose is to provide a gateway for all external communications, facilitating data transfer and protocol conversion.
The purpose of a firewall is to manage and monitor network traffic between different networks, typically between a secure internal network and an untrusted public network, to block unauthorized access while allowing authorized communications.
Firewalls are primarily used to enhance the speed of network communications by optimizing the data routes.
Describe the concept of 'Address Translation' in network communications.
Address translation is the process of converting domain names into IP addresses using a DNS server.
Address translation involves converting private IP addresses used within an internal network to public IP addresses for communication over the internet, often using NAT (Network Address Translation) to map multiple private addresses to a public one.
Address translation refers to the modification of data packets to ensure compatibility between different network protocols.
It is the method by which network addresses are assigned dynamically to devices as they join the network.
What is the purpose of a DMZ/perimeter subnet in network security?
The DMZ serves as the first line of defense against external attacks, absorbing and neutralizing threats before they can reach critical network infrastructure.
The purpose of a DMZ/perimeter subnet is to provide a security buffer between the public internet and an enterprise’s private network. It hosts publicly accessible servers, isolating them from the internal network to enhance security.
The DMZ is primarily used to filter spam and malicious content from internet traffic before it enters the private network.
A DMZ/perimeter subnet acts as a bridge for data transfer between secured and unsecured networks, facilitating safe data exchange.
How is a DMZ established within an enterprise network?
A DMZ is established by deploying a series of intrusion detection systems along the network's perimeter
A DMZ is established between two firewalls: one separating the DMZ from the public internet and another separating the DMZ from the enterprise's private network. This setup helps in controlling access and minimizing the impact of attacks originating from outside and inside the network.
The DMZ is set up directly on the main network router, creating a partition that filters incoming and outgoing traffic.
It is established by configuring a virtual network within the main network that acts independently but is monitored centrally.
Describe the purpose of protected subnetworks within an enterprise.
Protected subnetworks are designed to provide faster data access speeds within the enterprise by optimizing network routes.
Protected subnetworks are designed to secure sensitive data and critical systems that cannot be placed in the DMZ. They are insulated from both external and internal threats by additional security measures and isolation.
The purpose of protected subnetworks is to allow for experimental software deployments without risking the main network's stability.
These subnetworks facilitate the segregation of different organizational units within the enterprise, such as separating the finance and marketing departments' networks.
How are protected subnets established in an enterprise?
Protected subnets are established by using physical security measures such as biometric access controls to restrict entry.
Protected subnets are connected to the DMZ through a dedicated firewall, providing an extra layer of security. They are specifically configured to shield sensitive servers and data from unauthorized access, ensuring they are safeguarded from both the DMZ and the enterprise’s broader network
They are set up by encrypting all data traffic within the subnet using end to end encryption protocols.
Protected subnets are created by applying strict user authentication and rigorous monitoring protocols to track all data exchanges.
