Question 60
An advertising service is deployed across zones but uses a single cache instance required for request authorization. Which limitation must be considered before claiming the issue is fully resolved?
Explanation
Correct Answer
Fail-open security behavior may be unacceptable even when it improves uptime. This caution prevents extrapolating beyond the specific evidence or product boundary. Availability design must consider dependency failures and security invariants. The unresolved point should be tested using dependency graph, cache outage traces and application fallback behavior rather than assuming a working interface proves full compliance or resilience.
Incorrect Answers
An authorization cache can always fail open safely for continuity. This limitation is framed as a blanket exception, but the case requires a different, narrower caution. The relevant boundary is that fail-open security behavior may be unacceptable even when it improves uptime. Availability design must consider dependency failures and security invariants. Inspect dependency graph, cache outage traces and application fallback behavior.
A high availability objective always permits bypassing authorization. The proposed claim mistakes an incomplete signal or product feature for a universal guarantee. The relevant boundary is that fail-open security behavior may be unacceptable even when it improves uptime. Availability design must consider dependency failures and security invariants. Inspect dependency graph, cache outage traces and application fallback behavior.
Application availability is more important than ensuring correct authorization. This claim exceeds the evidence and ignores an important risk or operational dependency. The relevant boundary is that fail-open security behavior may be unacceptable even when it improves uptime. Availability design must consider dependency failures and security invariants. Inspect dependency graph, cache outage traces and application fallback behavior.