ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
Your organization is decomposing a monolithic payroll application into a set of containerized microservices that communicate through synchronous REST calls on the internal network. During operational risk analysis of these service-to-service integrations, which potential issue represents the most critical threat of triggering a widespread production outage if it is not explicitly mitigated?
Difficulty in correlating audit logs because services record events using different time zones
Greater susceptibility to SQL injection attacks against each microservice's individual data store
Increased network bandwidth consumption from larger JSON payloads exchanged between services
Failure of a downstream microservice causing blocking calls that cascade and bring down multiple dependent services
When microservices call one another synchronously, each request waits for the downstream service to respond before it can finish. If any single service becomes slow or unavailable, calls that depend on it will block and can quickly exhaust thread pools, connection limits, or request queues in upstream services. This "cascading failure" can ripple through the call chain and incapacitate the entire application. Mitigations-such as timeouts, bulkheads, and circuit-breaker patterns-are specifically designed to break these failure chains. While the other options describe valid concerns (e.g., SQL injection, bandwidth use, log correlation), they are less likely to cause an immediate, system-wide outage resulting from tight runtime dependencies between services that are invoked synchronously.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a cascading failure in microservices?
Open an interactive chat with Bash
What are timeouts, bulkheads, and circuit breaker patterns?
Open an interactive chat with Bash
Why are synchronous REST calls risky in microservice architectures?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)