Foundations · Module 9
Foundations assessment
Now that you have worked through all eight modules, it is time to test your understanding.
Previously
The ilities framework
Evaluate systems across quality attributes including security, privacy, accessibility, performance, reliability, scalability, maintainability, and more.
This module
Foundations assessment
Now that you have worked through all eight modules, it is time to test your understanding.
Next
Software Architecture Foundations practice test
Test recall and judgement against the governed stage question bank before you move on.
Progress
Mark this module complete when you can explain it without rereading every paragraph.
Why this matters
After completing this Foundation tier, progress to the Applied tier (3 CPD hours) for runtime trade-offs, integration choices, and architecture decisions under pressure.
What you will be able to do
- 1 Explain foundations assessment in your own words and apply it to a realistic scenario.
- 2 Assessment is useful when it checks judgement and produces defensible evidence.
- 3 Check the assumption "Assessment checks reasoning" and explain what changes if it is false.
- 4 Check the assumption "Evidence is safe" and explain what changes if it is false.
Before you begin
- No previous technical background required
- Read the section explanation before using tools
Common ways people get this wrong
- Exam cramming. Cramming fades quickly. Practice builds judgement.
- No feedback loop. Without feedback, assessment does not improve learning.
Now that you have worked through all eight modules, it is time to test your understanding. This quiz covers the key concepts from the entire foundation tier.
Treat this as a practice for judgement, not a test of memory. The goal is to show how you would reason under pressure.
Complete the assessment and a short reflection portfolio to consolidate your learning. Certificates (if provided) should be treated as evidence of participation, not as a guarantee of competence.
Next steps
After completing this Foundation tier, progress to the Applied tier (3 CPD hours) for runtime trade-offs, integration choices, and architecture decisions under pressure.
Total time guide: about 4 to 5 hours for a full first pass, including the assessment and a short architecture note.
Mental model
Assessment as evidence
Assessment is useful when it checks judgement and produces defensible evidence.
-
1
Learn
-
2
Practice
-
3
Assess
-
4
Evidence
Assumptions to keep in mind
- Assessment checks reasoning. Reasoning beats memorisation for real practice.
- Evidence is safe. Evidence should help without exposing secrets.
Failure modes to notice
- Exam cramming. Cramming fades quickly. Practice builds judgement.
- No feedback loop. Without feedback, assessment does not improve learning.
Check yourself
Software Architecture Foundations Assessment
0 of 12 opened
What is an architecture decision record used for
To capture a decision, the context, the trade-offs, and the rationale so change stays deliberate.
What is a non-functional requirement
A quality attribute constraint such as latency, availability, security, or maintainability.
Scenario. A product says it must be fast. What is the minimum you must add to make that a real requirement
A measurable threshold and scope. For example: p95 latency under 300ms for the checkout API under 200 requests per second.
Why is threat modelling useful early
It surfaces likely abuse paths so you can design controls before code hardens bad assumptions.
What is the goal of CI/CD in one line
To ship changes reliably by automating build, test, and deployment checks.
What does DevSecOps mean in practice
Security checks and ownership integrated into delivery pipelines and team habits, not a separate gate at the end.
Scenario. A security review finds auth issues after launch. What lifecycle artefact would have reduced the risk earlier
A threat model and explicit security requirements, plus automated verification checks (for example an ASVS-aligned checklist) during delivery.
What does OWASP ASVS help with
A structured checklist for verifying web app security requirements and test coverage.
Why does observability matter
Without signals you cannot debug, prove safety, or improve reliability under real load.
What is an incident in SRE terms
A user-impacting event requiring coordinated response and learning to reduce recurrence.
Why use the OSI model in troubleshooting
It gives a disciplined order to test hypotheses and isolate where evidence points.
What is an ility example
Availability, scalability, auditability, or recoverability, qualities you must design and operate for.
Artefact and reflection
Artefact
A short module note with one key definition and one practical example
Reflection
Where in your work would explain foundations assessment in your own words and apply it to a realistic scenario. change a decision, and what evidence would make you trust that change?
Optional practice
Complete one guided exercise and explain your decision in plain language