MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Microservices architecture is primarily designed to
a. Reduce security requirements
b. Support monolithic applications
c. Break down applications into smaller, independent components
d. Centralize all services on one server
Answer: ccrowdstrike+1
In microservices, the concept of “security by design” means
a. Adding security after deployment
b. Integrating security considerations during the design phase
c. Ignoring security until testing
d. Outsourcing security policies
Answer: btigera+1
The main communication mechanism between microservices is via
a. APIs
b. Shared databases
c. Direct file transfer
d. Network drives
Answer: asolo+1
OAuth 2.0 in microservices ensures
a. File encryption
b. Authentication and authorization of service communications
c. Parallel processing
d. Faster CI/CD execution
Answer: bwiz+1
OpenID Connect (OIDC) extends OAuth 2.0 by adding
a. Service orchestration
b. Authentication layer
c. Network segmentation
d. Logging features
Answer: btigera
JSON Web Tokens (JWT) are used in microservices for
a. Encrypting disk partitions
b. Representing claims securely between parties
c. DNS resolution
d. File access control
Answer: bwiz+1
Secure communication between microservices is often implemented using
a. Plain HTTP
b. mTLS
c. FTP
d. DNS tunneling
Answer: batlassian+1
Microservices increase the overall attack surface because
a. They reduce API endpoints
b. Each service communicates separately via APIs
c. They use single sign-on mechanisms
d. They are monolithic in structure
Answer: bsolo
Isolation in microservices enhances
a. Shared resource access
b. Service independence and fault containment
c. Central data pool management
d. Single-point failure tolerance
Answer: bsolo
Encrypting data in microservices protects
a. Logs only
b. Only access tokens
c. Data in transit and at rest
d. Configuration files
Answer: cwiz
TLS and mTLS are primarily used to
a. Speed up API responses
b. Secure data communication between services
c. Limit file access
d. Manage logs centrally
Answer: bokta+1
Access control using the principle of least privilege ensures
a. Broad service permissions
b. Minimal access necessary for each service
c. Shared credentials
d. Unlimited service connections
Answer: batlassian+1
Service discovery in microservices helps with
a. Data encryption
b. Finding and communicating between services
c. Analyzing logs
d. Policy configuration
Answer: binterviewbit
Containers and orchestration tools like Kubernetes improve security by
a. Isolating workloads and managing updates
b. Sharing host resources
c. Disabling firewalls
d. Avoiding encryption
Answer: ainterviewbit+1
Microservices logging should be centralized because
a. Logs are small and easy to manage
b. Services run across multiple hosts
c. It reduces network traffic
d. It disables audits
Answer: bsolo
Continuous monitoring in microservices helps detect
a. Hardware failures
b. Compliance and risk issues
c. License updates
d. Application colors
Answer: binterviewbit
Fault tolerance in microservices ensures
a. Logging is disabled
b. Systems continue even with service failures
c. Automatic data loss
d. Total service restart
Answer: bsolo
Domain-driven design (DDD) in microservices focuses on
a. Database consolidation
b. Core business logic and domain modeling
c. File-level encryption
d. Centralized authentication
Answer: binterviewbit
Overly complex interservice communication can be mitigated by
a. Increasing connections
b. Using service meshes
c. Allowing shared states
d. Using plain HTTP
Answer: batlassian+1
Microservices-based applications commonly rely on
a. A single database
b. Isolated data stores per service
c. A global config repository
d. File system synchronization
Answer: blearn.microsoft+1
Container security in microservices focuses on
a. Encrypting databases only
b. Securing the runtime environment
c. Avoiding isolation
d. Disabling ports
Answer: batlassian
Service-to-service communication security often involves
a. Shared credentials
b. Token-based authentication
c. Open public access
d. FTP tunneling
Answer: btigera+1
The main challenge with microservices logging is
a. Centralization
b. Excess logs from multiple services
c. Too few logs
d. Broken scripts
Answer: bsolo
Consumer-Driven Contracts (CDC) ensure
a. Matching interface agreements between services
b. Ignoring schema validation
c. Direct database sharing
d. No version control
Answer: ainterviewbit
The use of API gateways in microservices helps
a. Aggregate service access points securely
b. Disable authentication
c. Add redundancy
d. Reduce encryption overhead
Answer: aatlassian+1
A key drawback of microservices is
a. Easy central logging
b. Increased complexity and security management
c. Easy patch management
d. Unified architecture
Answer: binterviewbit+1
Microservices can defend against DDoS attacks using
a. Rate limiting and autoscaling
b. Weak password policies
c. Disabling logs
d. Central routing only
Answer: atigera
Encryption at rest in microservices protects against
a. Network sniffing
b. Unauthorized reading of stored data
c. API downtime
d. Unused ports
Answer: bwiz
Identity tokens verify
a. The size of API payload
b. Service or user identity authenticity
c. Network latency
d. Log timestamping
Answer: btigera+1
Continuous integration pipelines in microservices must include
a. Automated security checks
b. Manual approval only
c. Unsecured testing
d. Public artifact storage
Answer: aokta+1
Security scanning for dependencies helps in
a. Detecting vulnerable libraries
b. Speeding up builds
c. Managing storage
d. Ignoring version control
Answer: aokta
To secure interservice communication from outside visibility, use
a. Internal networks
b. Public URLs only
c. FTP services
d. Broadcast communication
Answer: awiz
Incident response planning supports
a. Rapid mitigation of detected breaches
b. Logging suppression
c. Data deletion
d. Backup failure
Answer: aatlassian
API authentication ensures
a. Only users with valid credentials access data
b. Any service can connect
c. Only internal systems can log
d. Reduced encryption
Answer: awiz+1
Least privilege principle is violated by
a. Giving broad system access
b. Restricting credentials
c. Controlled data allocation
d. Scoped tokens
Answer: atigera
Centralized monitoring in microservices is essential because
a. Services are distributed
b. Logs are static
c. APIs are single-host
d. Storage is unified
Answer: asolo+1
Token expiration is critical for
a. Reducing replay attacks
b. Faster response time
c. Log integrity
d. API bandwidth
Answer: atigera+1
A microservices system is resilient when
a. One service failure doesn’t crash the system
b. All services share data
c. Logs are disabled
d. Tokens don’t expire
Answer: asolo
Common tools for securing microservices include
a. mTLS, OAuth2, API gateways
b. FTP, telnet, HTTP
c. Random scripts
d. Encrypted cookies only
Answer: awiz+2
“Defense-in-depth” means
a. Multi-layered security protection
b. Relying on one firewall
c. Using only encryption
d. No intrusion detection
Answer: acheatsheetseries.owasp+2
Service mesh frameworks like Istio manage
a. Secure interaction and communication among microservices
b. Data storage
c. File compression
d. DNS lookup
Answer: aatlassian+1
Authentication of API calls prevents
a. Unauthorized service connections
b. Encryption
c. Service redundancy
d. Response delays
Answer: awiz+1
Configuration data in microservices should be
a. Encrypted and managed centrally
b. Plain text
c. Stored in logs
d. Shared via code
Answer: atigera+1
Audit logs improve
a. Incident investigation
b. Data exposure
c. Key rotation delay
d. Storage fragmentation
Answer: aatlassian+1
Microservices downtime can cascade due to
a. Interdependent services
b. Stateless architecture
c. Load balancing
d. Database replication
Answer: asolo
API gateways can enforce
a. Authentication, routing, and rate limiting
b. DNS caching
c. Container runtime
d. CI/CD pipelines
Answer: ainterviewbit+1
OAuth 2.0 scopes define
a. Levels of access permissions
b. Log severity
c. Token size
d. Service timeouts
Answer: atigera+1
Encrypting internal service traffic reduces risk from
a. Man-in-the-middle attacks
b. Log tampering
c. Load balancing errors
d. Debugging
Answer: awiz+1
Microservice redundancy minimizes
a. Single points of failure
b. Token reuse
c. Network security
d. Encryption load
Answer: ainterviewbit+1
The key goal of microservices security is
a. Isolate and protect each service while ensuring controlled communication
b. Merge all services into one
c. Allow open network access
d. Eliminate encryption
Answer: aatlassian+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info