Unit 6 - Practice Quiz

1 What is the primary purpose of credential management in software bots?

2 Why are environment variables commonly used when deploying software bots?

3 Which of the following represents a best practice for secrets management?

4 What does PII stand for in the context of data security and bot operations?

5 Which technique is commonly used to protect sensitive PII during data transformation?

6 In OAuth2 implementation, what mechanism is typically used to grant a bot access to resources without sharing the user's actual password?

7 What is a recommended security practice for API key management?

8 What is the main purpose of audit logging in bot operations?

9 How does workflow versioning benefit software bot developers?

10 Under GDPR compliance patterns, what does the 'Right to erasure' allow users to do?

11 Which of the following is a core requirement of GDPR when bots process user data?

12 Why is checking a bot's execution history important for system administrators?

13 What is the function of an error workflow in bot monitoring?

14 Which performance metric measures the percentage of times a bot completes its intended task without failing?

15 What does 'execution time' measure in the context of bot performance monitoring?

16 In bot optimization, what is a bottleneck?

17 How does caching improve a software bot's performance?

18 Why is API reduction considered an effective optimization technique?

19 What is the primary goal of change management in a software bot's lifecycle?

20 Why are good documentation practices essential for software bots?

21 Why is it a best practice to use environment variables rather than hardcoded configuration files for deploying a software bot across different environments (e.g., Dev, QA, Prod)?

22 A bot requires access to an external database. What is the most secure method for the bot to retrieve the database password at runtime?

23 A customer service bot reads incoming emails and logs the text for analytics. To comply with privacy standards, how should the bot handle Social Security Numbers (SSNs) found in the text?

24 A bot needs continuous, long-term access to read files from a user's Google Drive. In an OAuth2 implementation, which token must the bot store securely to maintain this access without requiring the user to re-authenticate?

25 To maintain high availability when rotating an API key for a production bot, what sequence of actions should a developer follow?

26 What is the primary purpose of maintaining an immutable audit log for a bot that processes financial transactions?

27 A team is updating a bot's workflow schema. Why is semantic versioning (e.g., moving from ) crucial when making breaking changes?

28 Under GDPR, an individual invokes their 'Right to be Forgotten.' How does this requirement typically impact a bot's execution history and audit logs?

29 A bot fails sporadically during a file parsing step. Which element of the execution history is most valuable for diagnosing the root cause of these sporadic failures?

30 When a bot encounters a '503 Service Unavailable' HTTP error while calling a third-party API, what is the most robust error workflow implementation?

31 Over the course of three months, a bot's execution time steadily increases from 5 seconds to 45 seconds, even though the daily transaction volume remains constant. What is the most likely cause of this degradation?

32 A bot processes 1,000 requests. It completes 800 successfully. It encounters 150 'Business Exceptions' (e.g., account closed, missing required user input) and 50 'Technical Exceptions' (e.g., database timeout). How should the technical success rate be calculated to reflect the bot's system reliability?

33 A bot workflow takes 10 minutes to complete. Profiling shows that downloading files takes 1 minute, OCR processing takes 8 minutes, and database updates take 1 minute. What is the most effective architectural change to eliminate this bottleneck?

34 A pricing bot queries an external REST API for the current USD-to-EUR exchange rate 10,000 times a day. The rate only changes once at midnight. What optimization technique should be applied?

35 When implementing caching for a software bot, what is the primary risk of setting the Time-To-Live (TTL) too high on cached objects?

36 A critical financial bot requires an update to its calculation logic. To minimize risk, the operations team routes 5% of the workload to the updated bot and 95% to the old bot, monitoring for errors before a full rollout. What change management strategy is this?

37 Which type of documentation is most critical for a Level 1 Support team tasked with resolving daily exceptions generated by a software bot?

38 Why is it heavily recommended to use a dedicated 'Service Account' rather than a human user's credentials for running a software bot?

39 A bot extracts dates from an old legacy system formatted as 'DD-MM-YY' and must input them into a modern CRM requiring ISO 8601 format ('YYYY-MM-DD'). What is the most reliable way to handle this transformation?

40 A bot processes customer refunds. If the bot attempts to refund an account that is already closed, it throws a 'ClosedAccountException'. How should the error workflow categorize and handle this exception?

41 A distributed software bot fleet processes 10,000 tasks per minute. The third-party API mandates automated secret rotation every 12 hours. Which architectural pattern best ensures zero-downtime secret rotation while minimizing central secret manager API rate limit exhaustion?

42 A bot parses unstructured customer support emails to extract intent before forwarding payloads to a third-party analytics API. To prevent PII leakage, static regex filtering is currently used but fails on edge cases like misspellings and non-standard ID formats. What is the most robust mitigation strategy?

43 A highly concurrent multi-threaded bot uses OAuth2. When the access token expires, multiple threads simultaneously attempt to use the refresh token. The authorization server invalidates the refresh token upon the first use (Refresh Token Rotation), causing subsequent threads to fail and the bot to log out. How should this race condition be resolved?

44 In a distributed bot architecture handling sensitive financial transactions, an attacker compromises a worker node and attempts to alter local audit logs to hide unauthorized transfers. Which implementation provides the strongest guarantee of non-repudiation and tamper evidence for the audit trail?

45 A stateful orchestration bot manages a long-running workflow (e.g., employee onboarding) that can take 30 days. You need to deploy a new version (v2) of the workflow that drastically changes the state machine schema. How should you manage existing in-flight v1 workflows?

46 A bot uses an Event Sourcing architecture where all state changes are stored as an immutable sequence of events. A user invokes their GDPR 'Right to be Forgotten'. How can the system comply without violating the immutability constraint of the event log?

47 A bot relies on a downstream API that is currently experiencing a cascading failure. Continuous retries from your bot fleet are exacerbating the downstream outage. Which combination of error handling patterns is best suited to allow the downstream service to recover while maintaining system stability?

48 A bot engineer parallelizes a data-fetching workflow. The workflow takes seconds sequentially. Only of the workflow can be parallelized. According to Amdahl's Law, what is the theoretical maximum speedup factor as the number of parallel threads approaches infinity?

49 Monitoring dashboards for an asynchronous Node.js bot show low CPU utilization (), high memory usage that plateaus, and an execution time that degrades linearly as concurrent tasks increase. The network bandwidth is significantly underutilized. What is the most likely bottleneck?

50 A bot needs to sync user profiles and their associated recent orders from a REST API. Currently, it fetches users (1 call), then iterates through the 1,000 users to fetch orders for each ($1,000$ calls), resulting in rate limiting (the N+1 problem). Which technique best minimizes API calls while ensuring data integrity?

51 A team must deploy a breaking schema change to a bot's backend database, alongside updated bot logic. They require zero downtime and the ability to roll back instantly if the new bot logic fails. Which deployment strategy fulfills these requirements?

52 When developing enterprise software bots that interact with multiple evolving internal APIs, what is the most effective documentation practice to prevent 'doc drift' regarding bot capabilities and required payloads?

53 A bot running on an AWS EC2 instance needs to securely access an S3 bucket. To adhere strictly to the Principle of Least Privilege and avoid hardcoded credentials, which approach should be implemented?

54 While environment variables are commonly used for configuration, they pose a security risk in containerized bot deployments if an application crashes. What is the specific vulnerability, and how is it best mitigated?

55 A bot aggregates user behavior data to train an AI model. To preserve privacy, names are pseudonymized. However, an attacker uses external datasets to cross-reference timestamp, zip code, and gender to re-identify users. Which transformation technique should be applied to the dataset to mathematically guarantee against this linkage attack?

56 An API key utilized by a heavily distributed external partner bot has been compromised. Immediate revocation will cause a catastrophic outage for the partner's critical systems. What is the safest immediate mitigation strategy that secures the system while maintaining partner uptime?

57 A serverless bot executes millions of micro-tasks daily. Storing the full execution history in a relational database for debugging is causing massive storage costs and database locks. Which architectural adjustment optimizes both performance and cost for execution history?

58 A bot retrieves dynamic configuration data that updates unpredictably. The cache is set to expire every 60 seconds. When the cache expires under high load, thousands of bot threads simultaneously query the underlying database, causing a crash. What is the optimal caching strategy to prevent this 'Cache Stampede'?

59 When implementing the OAuth2 Authorization Code flow for a bot running on a headless server without a guaranteed secure client secret storage, why must PKCE (Proof Key for Code Exchange) be utilized?

60 A webhook-driven bot heavily relies on external payload schemas. The external provider announces a move from API v1 to v2, adding new fields but not removing any old ones. According to semantic versioning and robust workflow design, how should the bot's payload validation logic be structured to handle this?