Lubinik Fleet Incidents & Recovery

Training mode

Lubinik Fleet Incidents & Recovery

Time remaining:

0 / 20 answered

1. The dashboard reports that the PHP cURL extension is required. What failed?

The dashboard reports that the PHP cURL extension is required. What failed? The GitHub tag is invalid The local dashboard runtime lacks cURL before any remote request can be made The remote backup was deleted Every live WordPress database is corrupt

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
2. One site reports a missing local secret environment variable. What should be checked first?

One site reports a missing local secret environment variable. What should be checked first? The browser viewport width The remote theme template hierarchy The WordPress permalink slug The site secret_env mapping and the corresponding value loaded from .env

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
3. A live site rejects the HMAC signature while other sites work. What is the most likely first comparison?

A live site rejects the HMAC signature while other sites work. What is the most likely first comparison? That site's local secret versus its remote LUBINIK_UPDATER_REMOTE_SECRET The CSS versions on all sites The administrator display name The size of the uploads folder

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
4. What commonly causes a stale timestamp rejection despite correct secrets?

What commonly causes a stale timestamp rejection despite correct secrets? An old child-theme screenshot A missing featured image A duplicated menu item Clock drift or a request delayed beyond the allowed freshness window

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
5. What does a replayed nonce error mean?

What does a replayed nonce error mean? The same signed request identity was already accepted within the protection window The site has no backups The package ZIP contains two folders GitHub returned a newer tag

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
6. Only one site reaches the 15-second connection timeout. What is proven?

Only one site reaches the 15-second connection timeout. What is proven? GitHub deleted the repository The updater definitely corrupted that site Every other site also failed The dashboard could not establish a connection to that site in time

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
7. The remote returns HTML with HTTP 502 instead of JSON. How does the dashboard represent it?

The remote returns HTML with HTTP 502 instead of JSON. How does the dashboard represent it? As a failed non-JSON response with HTTP code, content type, and a limited snippet As a successful empty package list As a valid signed update confirmation By executing the returned HTML

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
8. A decoded JSON response arrives with HTTP 403. What does remote_request do?

A decoded JSON response arrives with HTTP 403. What does remote_request do? It treats valid JSON as success regardless of status It removes the site from configuration It forces ok to false and records the HTTP code It retries as anonymous GET

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
9. Several reachable sites report GitHub HTTP 503 while checking packages. What is the best interpretation?

Several reachable sites report GitHub HTTP 503 while checking packages. What is the best interpretation? All WordPress installations are offline The sites are reachable but their updater cannot currently read GitHub package data All installed packages are corrupt Every HMAC secret is wrong

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
10. What is the normal response to a widespread temporary GitHub 503?

What is the normal response to a widespread temporary GitHub 503? Retry later, or update urgent packages manually with controlled evidence Disable TLS verification permanently Immediately rotate every site secret Delete all remote backups

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
11. A multi-site update succeeds on six sites and fails on one. What should the operator conclude?

A multi-site update succeeds on six sites and fails on one. What should the operator conclude? The failed site must already be current The fleet is partially updated and the failed site needs separate diagnosis and fresh status The entire fleet update was atomic and therefore rolled back The dashboard can infer success without another check

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
12. Why is clicking Update selected not production confirmation?

Why is clicking Update selected not production confirmation? It only initiates requests; confirmation requires successful responses and refreshed version evidence The dashboard always runs in simulation mode Buttons cannot submit POST requests Updates occur only after browser restart

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
13. A downloaded plugin ZIP lacks the configured main plugin file. What should happen?

A downloaded plugin ZIP lacks the configured main plugin file. What should happen? WordPress guesses a main file The target is emptied and the ZIP is trusted The dashboard renames style.css Validation rejects it before the installed target is replaced

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
14. An interruption occurs after the installer empties the target but before all files are copied. What risk exists?

An interruption occurs after the installer empties the target but before all files are copied. What risk exists? The package directory may be partial and require recovery from a validated backup Only the local dashboard CSS is affected The HMAC automatically reconstructs files The replacement is guaranteed atomic

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
15. The dashboard sends backup=latest during rollback. What must the remote updater still verify?

The dashboard sends backup=latest during rollback. What must the remote updater still verify? That the selected backup belongs to the package and has a valid package structure That no local log exists That the backup name matches the WordPress site title That GitHub currently returns HTTP 200

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
16. A rollback endpoint returns success. What additional check provides stronger operational proof?

A rollback endpoint returns success. What additional check provides stronger operational proof? Refresh status and verify the restored version and package health on that site Change the site URL Delete the rollback backup immediately Assume every fleet site was rolled back

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
17. The storage panel reports old ZIP and extract items directly under uploads/lubinik-updater. What cleanup boundary is recommended?

The storage panel reports old ZIP and extract items directly under uploads/lubinik-updater. What cleanup boundary is recommended? Delete WordPress uploads Delete the entire updater storage directory Remove every backup before an update Remove stale temporary ZIP/extract items while preserving backups and logs

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
18. Why might a package row show no Rollback button?

Why might a package row show no Rollback button? The remote REST API is anonymous The dashboard lost its CSS The status reports no available backup for that installed package The package is necessarily broken

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
19. What does a successful entry in local operations.jsonl prove?

What does a successful entry in local operations.jsonl prove? Every package in the fleet has the same version The remote filesystem is atomic The production frontend passed every functional test The dashboard recorded its interpretation of the response, not independently that the live application works

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.
20. Which sequence is safest for a high-risk updater-agent update?

Which sequence is safest for a high-risk updater-agent update? Delete backups, disable authentication, then update Check status, confirm the correct target and backup, update explicitly, refresh status, then test the site Change secrets during the active request Update every site blindly and inspect later

Hint
Separate local orchestration, remote execution, transport evidence, and verified production state.

1. The dashboard reports that the PHP cURL extension is required. What failed?

2. One site reports a missing local secret environment variable. What should be checked first?

3. A live site rejects the HMAC signature while other sites work. What is the most likely first comparison?

4. What commonly causes a stale timestamp rejection despite correct secrets?

5. What does a replayed nonce error mean?

6. Only one site reaches the 15-second connection timeout. What is proven?

7. The remote returns HTML with HTTP 502 instead of JSON. How does the dashboard represent it?

8. A decoded JSON response arrives with HTTP 403. What does remote_request do?

9. Several reachable sites report GitHub HTTP 503 while checking packages. What is the best interpretation?

10. What is the normal response to a widespread temporary GitHub 503?

11. A multi-site update succeeds on six sites and fails on one. What should the operator conclude?

12. Why is clicking Update selected not production confirmation?

13. A downloaded plugin ZIP lacks the configured main plugin file. What should happen?

14. An interruption occurs after the installer empties the target but before all files are copied. What risk exists?

15. The dashboard sends backup=latest during rollback. What must the remote updater still verify?

16. A rollback endpoint returns success. What additional check provides stronger operational proof?

17. The storage panel reports old ZIP and extract items directly under uploads/lubinik-updater. What cleanup boundary is recommended?

18. Why might a package row show no Rollback button?

19. What does a successful entry in local operations.jsonl prove?

20. Which sequence is safest for a high-risk updater-agent update?