M2.15 module quiz
Ten questions. 80% to pass (8 of 10). Open book, unlimited retakes.
Answers are collapsed under each question. Answer first, then check.
Q1
Blast radius traverses:
A. The full dependency graph
B. Two hops
C. One hop: direct neighbours only
D. As many hops as the risk score requires
Show answer
Correct: C. At two hops a moderately connected estate returns most of itself, and a result that highlights everything highlights nothing. It narrows the question rather than closing it.
Q2
The classification default for an unmapped resource type is:
A. Safe
B. Warning
C. Unknown, excluded from the result
D. Affected
Show answer
Correct: B. Safe must be explicitly proven through the behaviour map or the edge matrix. So amber carries two meanings, and the side-panel prose distinguishes “briefly disrupted” from “we do not know”.
Q3
Modify operations are classified by:
A. The type of edge connecting them
B. The environment the target is in
C. The computed risk score itself
D. The target’s resource type
Show answer
Correct: D. Three families: online modify where all connections are safe, restart modify where the resource reboots, and pool modify where child nodes are recreated. Delete and stop are classified by edge type instead.
Q4
Stopping an instance with an attached volume shows the volume as:
A. Safe
B. Warning
C. Affected
D. Dimmed
Show answer
Correct: A. Storage is preserved through a stop on all three clouds. A delete of the instance shows the volume as warning, because it detaches although the data survives.
Q5
The db_access edge needs a target-type-aware override because:
A. Databases cost far more than the neighbours around them
B. Security groups can span more than one cloud region
C. The edge is symmetric in the graph but the consequence is not
D. Databases may be multi-AZ and survive the change
Show answer
Correct: C. Deleting the database costs the app its data store; deleting the app leaves the database untouched. Without the override one direction would always be wrong.
Q6
A db_access edge is detected from:
A. A shared security group, network or subnet
B. Connection strings found in the workload config
C. Observed network traffic between the two resources
D. The application’s own configuration and manifests
Show answer
Correct: A. It means one could reach the other, not that they do. A flat network produces edges between pairs that have never exchanged a packet.
Q7
The risk score’s three components are:
A. Cost, environment and resource age
B. Neighbour count, the edge types and the provider
C. Impact severity ratio, environment and ownership spread
D. Severity, likelihood and exposure
Show answer
Correct: C. Severity is a ratio rather than a count, so a load balancer with forty healthy targets and one brief disruption scores low rather than high.
Q8
An all-safe result in production scores:
A. 15, from the environment weight
B. Between 1 and 20
C. Undefined
D. 0
Show answer
Correct: D. The environment term is zeroed when nothing is impacted. Without that rule every production action would carry a floor of 15 and the score would stop distinguishing them.
Q9
A score above 50 driven by ownership spread rather than severity calls for:
A. Coordination, or a redesign that narrows the reach
B. A declared maintenance window
C. Executive approval to proceed
D. Deferring the change until the risk score drops
Show answer
Correct: A. A high severity ratio is a technical problem; a wide ownership spread is a coordination problem. Sending the second to a maintenance window means it proceeds smoothly and still damages several teams.
Q10
Which entity type cannot be a blast radius root?
A. A resource
B. A resource group
C. An autoscaler policy
D. A schedule
Show answer
Correct: B. Team, resource group and cloud account are not supported roots in v1. The schedule root is the one most people meet first, and it has the widest reach.
What’s next
Back to Blast radius analysis.