12. Resilience, Security and ReproducibilityIntroduction and ContextHigh-performance computing (HPC) systems enable large-scale simulation, artificial intelligence, scientific discovery, and data-intensive decision-making. Their power is obtained by combining many processors, memory modules, storage devices, accelerators, and communication networks. This scale creates a fundamental systems problem: failure is no longer an exceptional event. A cluster containing thousands of components may experience hardware faults, software defects, network interruptions, configuration errors, cyberattacks, or data corruption during a single long-running computation. Performance alone is therefore an inadequate measure of HPC quality. A useful system must also preserve work when components fail, protect data and users from unauthorized activity, support multiple tenants safely, and allow results to be independently reproduced. These concerns are closely related. Checkpointing produces recovery data; security protects that data; provenance explains how it was generated; reproducibility determines whether the computation can be repeated and trusted. This chapter examines resilience, security, and reproducibility as strategic dimensions of HPC design. The objective is not merely to list protective technologies, but to support decisions about where controls should be placed, how much overhead is justified, and how technical safeguards should be connected to organizational governance and responsible research. Learning ObjectivesAfter studying this chapter, students should be able to: 1. Explain why failures are expected in large-scale HPC environments. 2. Compare checkpoint–restart, replication, algorithm-based fault tolerance, and graceful degradation. 3. Design a recovery strategy using failure models, recovery-point objectives, and recovery-time objectives. 4. Apply principles of authentication, authorization, least privilege, isolation, and data protection in shared clusters. 5. Explain provenance, workflow capture, containers, environment management, and reproducible research. 6. Evaluate the trade-offs among performance, resilience, security, cost, and scientific validity. 7. Identify governance, ethical, and professional responsibilities in the use of HPC resources. The Reliability Problem at ScaleA failure is any event that prevents a computation or service from producing its intended result. Failures may be caused by hardware faults, such as a failed processor, disk, memory module, power supply, or network switch. They may also arise from software bugs, numerical instability, resource exhaustion, incorrect user input, or an operating-system failure. In addition, HPC systems face malicious events, including credential theft, ransomware, denial-of-service activity, and unauthorized modification of data. It is useful to distinguish three related terms. A fault is the underlying defect or abnormal condition. An error is an incorrect internal state produced by the fault. A failure occurs when the incorrect state becomes visible as incorrect or unavailable service. For example, a defective memory cell is a fault; a corrupted value in memory is an error; a wrong scientific result or terminated job is a failure. The mean time between failures (MTBF) describes the average operating time between failures, while mean time to repair (MTTR) describes the average time needed to restore service. In a large distributed system, the aggregate reliability is influenced by the number of components and their dependencies. Even if individual components are reliable, the probability that at least one component fails during a long job increases with system size and execution time. A resilience strategy must also distinguish availability from correctness. Availability concerns whether a service is accessible. Correctness concerns whether the output is valid. A system that completes quickly but silently produces corrupted results is less trustworthy than a slower system that detects errors and recovers safely. A Resilience Framework for HPCResilience is the capacity of a system to continue useful operation, recover from disruption, and preserve trustworthy results. It includes several stages: - Prevention: reducing the probability of faults through quality hardware, testing, redundancy, patching, and sound configuration.
- Detection: identifying faults or abnormal behavior through health checks, checksums, monitoring, assertions, and anomaly detection.
- Containment: preventing an error from spreading across processes, nodes, datasets, or tenants.
- Recovery: restoring computation or service using restart, failover, recomputation, or repair.
- Adaptation: changing operating conditions, such as reducing workload size or excluding a failed node.
- Learning: using logs, incident reviews, and provenance to improve future designs.
This framework reflects a shift from the assumption of perfect execution to the engineering principle of fail-aware computing. Resilience is not a single product. It is an architectural property created by coordinated choices at the application, middleware, operating-system, infrastructure, and governance levels. Checkpoint–RestartCheckpointing periodically saves sufficient application state to stable storage so that execution can resume after failure. A checkpoint may include process memory, program counters, open-file information, communication state, and application-specific data. Restart uses the most recent valid checkpoint rather than beginning from the start. The simplest method is coordinated checkpointing. All participating processes reach a consistent point, and their states are saved together. This approach is easier to reason about because the checkpoint represents a globally consistent state, but it may pause the application and create a large burst of storage traffic. Uncoordinated checkpointing allows processes to save independently. It can reduce synchronization overhead, but recovery is more complex. The system may need message logging or dependency tracking to avoid an inconsistent global state. A related technique, incremental checkpointing, stores only memory pages or data blocks changed since the previous checkpoint. It reduces write volume but requires management of checkpoint chains. Application-level checkpointing saves only the logical state needed by the program. For a numerical simulation, this may include the current timestep, boundary conditions, random-number-generator state, and distributed arrays. Application-level checkpoints are often smaller and more portable than complete process images, but developers must design and maintain them carefully. The interval between checkpoints involves a trade-off. Frequent checkpoints reduce the amount of lost work but consume time, storage bandwidth, and energy. Infrequent checkpoints improve uninterrupted performance but increase rework after a failure. A practical policy considers job duration, observed failure rates, checkpoint cost, storage reliability, and the value of the computation. Checkpoint files must themselves be protected. A corrupted checkpoint can cause repeated failure or, worse, produce plausible but invalid output. Checksums, version metadata, atomic file replacement, replicated storage, and periodic validation are therefore essential. Replication and RedundancyReplication maintains multiple copies of computation, data, or services. A data replica may be placed on a separate storage device or site. A service replica may allow another scheduler, metadata server, or workflow service to take over. Active replication executes multiple copies simultaneously and can mask faults immediately, while passive replication maintains a standby copy that becomes active after failure. Replication improves availability and recovery speed but consumes resources. If all replicas share the same power supply, network segment, software image, or administrative credentials, a common-cause failure may defeat them all. Effective redundancy therefore requires independence across relevant failure domains. For numerical applications, replicated execution can be expensive. It may be justified for safety-critical computations, high-value production workflows, or short tasks where immediate failover matters. For less critical work, checkpointing and recomputation may provide a better balance. Algorithm-Based Fault Tolerance and Error DetectionSome algorithms can detect or correct errors using mathematical structure. Checksum relations, parity, redundant equations, and encoded data allow a system to reconstruct missing or corrupted values. Algorithm-based fault tolerance is valuable when storing complete copies would be too costly. Fault tolerance must include detection. Useful mechanisms include checksums for files and messages, error-correcting memory, assertions about physical or mathematical constraints, range checks, conservation-law checks, and comparison of independent calculations. Detection should occur close to the source of corruption, because undetected errors can propagate through many stages of a workflow. Graceful Degradation and Recovery-Oriented DesignA resilient application need not always preserve full performance. Graceful degradation enables it to continue with reduced precision, fewer nodes, lower resolution, or a smaller dataset. For example, an exploratory simulation may continue with a reduced ensemble after several workers fail, while a final production run may stop because complete accuracy is required. Recovery-oriented design treats restart as a normal execution path. Programs should release resources cleanly, record their state, validate inputs on restart, and distinguish recoverable from non-recoverable errors. Idempotent operations—operations that can safely be repeated without producing inconsistent side effects—are particularly valuable in workflows that may be retried. Planning Recovery: RPO, RTO, and Failure DomainsA recovery policy should begin with business, scientific, and operational requirements. The recovery point objective (RPO) specifies the maximum acceptable amount of data or work that may be lost. If the RPO is ten minutes, checkpoints or durable state must be available at intervals that support this limit. The recovery time objective (RTO) specifies how quickly service or computation must be restored. RPO and RTO should not be treated as purely technical values. A climate-modeling experiment, a financial risk calculation, and a classroom batch job have different consequences of loss and delay. The cost of protection should be proportional to the importance, sensitivity, and irreplaceability of the workload. Failure domains are groups of components likely to fail together. Examples include a node, rack, availability zone, data center, storage system, or administrative domain. A checkpoint stored on the same node as the computation provides little protection against node loss. Similarly, replicas managed by the same compromised account may all be altered by one attack. A recovery plan should specify: - what state is saved and where;
- how checkpoint integrity is verified;
- how restart is initiated and authorized;
- which dependencies must be restored;
- how results are validated after recovery;
- who is responsible for decisions during an incident; and
- how recovery is tested.
Untested recovery procedures are assumptions, not capabilities. Restoration drills and failure injection can reveal missing credentials, incompatible software, insufficient storage bandwidth, and undocumented dependencies. Security Architecture for Shared HPC EnvironmentsHPC security protects confidentiality, integrity, and availability. Confidentiality prevents unauthorized disclosure; integrity prevents unauthorized or accidental alteration; availability ensures that authorized users can obtain resources and services. Security controls should protect not only login access but also schedulers, storage, software supply chains, monitoring systems, and inter-node communication. Identity, Authentication, and AuthorizationIdentity management establishes who a user or service is. Authentication verifies that identity, using passwords, certificates, hardware tokens, or multifactor authentication. Authorization determines what the authenticated identity may do. These functions should be separated conceptually and implemented through centralized, auditable policies where practical. The principle of least privilege gives users, jobs, and services only the permissions needed for their tasks. A data-analysis job should not automatically be able to administer the cluster. Service accounts should have narrowly defined permissions, and credentials should not be embedded in source code or shared through informal channels. Role-based access control assigns permissions to roles such as researcher, project manager, system administrator, or data steward. Attribute-based approaches can additionally consider project, data classification, location, time, or job properties. Privileges should be reviewed regularly, especially when staff change roles or projects end. Isolation and Secure Multi-TenancyIn a shared cluster, users may have different levels of trust and may handle data with different sensitivity. Isolation mechanisms include operating-system users and groups, scheduler allocations, containers, namespaces, access-control lists, network segmentation, and storage quotas. Containers improve packaging and portability, but they are not automatically a complete security boundary; kernel vulnerabilities, excessive privileges, mounted host paths, and unsafe images can undermine isolation. A secure multi-tenant design separates control-plane services from compute workloads, restricts lateral network movement, limits access to metadata, and monitors unusual resource use. Jobs should not be able to inspect other users’ processes, memory, temporary files, or environment variables. Temporary data must be removed or securely managed after job completion. Data ProtectionData should be classified according to sensitivity, such as public, internal, confidential, personal, or regulated. Classification informs encryption, retention, access, backup, and disposal requirements. Encryption in transit protects data moving between clients, nodes, and storage services. Encryption at rest protects stored data if media or snapshots are exposed. Keys must be managed separately from the protected data and rotated according to policy. Integrity controls include cryptographic hashes, signed artifacts, immutable logs, versioned datasets, and write protections. Backups should be isolated from ordinary user credentials, because an attacker who can modify primary data and backups can defeat recovery. Monitoring and Incident ResponseSecurity monitoring should record authentication events, privilege changes, job submissions, unusual data transfers, failed access attempts, and changes to software or configuration. Logs require time synchronization, restricted access, retention rules, and protection against tampering. An incident-response process normally includes preparation, detection, analysis, containment, eradication, recovery, and lessons learned. During an incident, preserving evidence and communicating accurately are as important as restoring service. Administrators should avoid deleting logs or changing systems unnecessarily before evidence is collected. Reproducibility, Provenance, and Scientific TrustReproducibility means that an analysis can be repeated using the same materials and methods, ideally producing the same result. Replicability is often used for obtaining consistent findings through an independent implementation, dataset, or team. In practice, the distinction varies across disciplines, but both concepts require transparency about data, code, parameters, and environment. HPC results may be difficult to reproduce because of nondeterministic scheduling, parallel reduction order, floating-point arithmetic, random initialization, changing libraries, unavailable datasets, hardware-specific optimizations, and undocumented manual steps. Reproducibility is therefore a systems property rather than merely a matter of publishing source code. ProvenanceProvenance records the origin, transformations, and usage of data and computational products. A useful provenance record identifies input datasets and versions, code commits, compiler and library versions, configuration parameters, hardware or accelerator type, random seeds, workflow steps, timestamps, user or service identity, and output checksums. Provenance can be represented as a directed acyclic graph in which data entities, activities, and agents are connected. This graph answers questions such as: Which source files contributed to this result? Which code produced this model? Which parameters were used? What changed between two runs? Provenance has operational value. It supports debugging, audit, compliance, attribution, result comparison, and recovery. It also helps distinguish a scientific change from an environmental change. If a result differs, provenance may show that the algorithm changed, the input data were updated, or a compiler optimization altered numerical behavior. Reproducible WorkflowsA reproducible workflow expresses data preparation, computation, validation, and publication as explicit, executable steps. Workflow managers can record dependencies, execute only changed stages, retry failed tasks, and preserve logs. Version-control systems should track source code, configuration, workflow definitions, and documentation. Large datasets and model artifacts may require specialized versioning or immutable archives rather than ordinary source repositories. Containers and environment specifications can capture software dependencies. However, a container does not guarantee reproducibility if it downloads unpinned packages at runtime, depends on external services, uses nondeterministic operations, or omits hardware and driver information. Reproducibility may require a software bill of materials, fixed package versions, archived images, compiler details, and documented hardware assumptions. Numerical reproducibility requires special care. Floating-point addition is not generally associative, so different reduction orders can produce slightly different results. Such differences may be acceptable within a defined tolerance, whereas uncontrolled divergence may indicate a serious defect. Researchers should define validation criteria, report tolerances, record random seeds where appropriate, and distinguish bitwise reproducibility from statistical reproducibility. Responsible Research and GovernanceHPC resources are usually shared institutional assets. Responsible use includes respecting allocation policies, reporting resource consumption honestly, protecting restricted data, acknowledging software and infrastructure contributions, and avoiding experiments that create unnecessary risk for other users. Research integrity requires that results not be selectively reported because they are convenient, that failed runs and exclusion criteria be documented where relevant, and that code or data limitations be disclosed. Provenance should support accountability without exposing personal information or confidential data unnecessarily. Data minimization and controlled access are important when workflows involve health, financial, location, or educational records. Security controls must also respect legitimate research needs. Excessive restrictions can prevent collaboration and reduce scientific openness, while weak controls can expose participants and institutions. Governance should define data ownership, permitted uses, retention, access approval, incident reporting, publication review, and responsibility for third-party software. Artificial intelligence workflows add further concerns. Training data may contain copyrighted, personal, or biased material; models may memorize sensitive information; and generated outputs may be difficult to validate. Researchers should document datasets, evaluation procedures, model versions, compute resources, and known limitations. Automated decisions should remain subject to appropriate human oversight. An Illustrative Case: Resilient and Reproducible Climate SimulationBackgroundConsider an illustrative national research laboratory running a three-week regional climate simulation on a 4,000-node GPU cluster. The simulation produces several terabytes of output and uses external observational data. Multiple research groups share the cluster, and some input data are subject to controlled-access agreements. Situation and ProblemAn earlier run failed after twelve days because of a network-storage outage. The team had saved checkpoints only on the primary parallel file system, and the restart files were partially corrupted. The experiment was repeated from the beginning. Results from two supposedly identical runs also differed slightly because software versions, GPU libraries, and random seeds were not recorded consistently. AnalysisThe team identifies three classes of risk. First, long execution time creates substantial exposure to node and storage failure. Second, the checkpoint design lacks independence and integrity verification. Third, the workflow is not reproducible because code, environment, input-data versions, and numerical settings are incompletely captured. The presence of controlled-access observations also requires stronger authorization and audit controls. Approach and StrategyThe laboratory adopts coordinated application-level checkpoints every four hours, with incremental storage for changed state. Each checkpoint receives a manifest containing a sequence number, software revision, parameter file, input-data identifiers, and cryptographic checksums. A completed checkpoint is copied to a separate storage failure domain, and the previous valid checkpoint is retained until the new one has been validated. The workflow is expressed in a version-controlled workflow manager. Dependencies are built into a signed container image with pinned packages and a documented GPU runtime. The scheduler records allocation, node type, and job configuration. Random-number-generator states are included in the checkpoint, and numerical validation compares conservation metrics and selected benchmark outputs rather than requiring exact bitwise equality. Access is controlled through project groups and multifactor authentication. Controlled observations are kept in a restricted storage area, while derived public products are placed in a separate publication area. Service credentials are short-lived and limited to the required datasets. Monitoring alerts the team to failed checkpoint transfers, unusual access patterns, and repeated job restarts. Finally, the team conducts a recovery exercise by deliberately making a compute node unavailable and restoring from the secondary checkpoint repository. A second exercise tests recovery when the primary storage service is inaccessible. OutcomeThe revised design reduces lost work after an ordinary node failure and provides a tested path for storage-service failure. The team can identify exactly which inputs and software produced each output. Small numerical differences remain across hardware configurations, but they fall within documented tolerances and do not invalidate the scientific conclusions. Access logs and provenance records also support institutional review. Learning PointsThe case demonstrates that resilience, security, and reproducibility reinforce one another. Checkpoint metadata becomes provenance; access controls protect recovery data; validation detects both corruption and scientific inconsistency; and recovery exercises convert written procedures into operational capability. The design is not cost-free, but its overhead is justified by the duration, value, and sensitivity of the workload. Challenges, Limitations, and Common MistakesSeveral recurring mistakes weaken HPC protection. Teams may checkpoint frequently without measuring storage contention, store all replicas in one failure domain, or assume that a successful restart implies a correct result. They may deploy containers without scanning images, use broad administrator privileges for convenience, or leave secrets in job scripts and notebooks. Reproducibility is also often overstated. Publishing code without input-data versions, dependency specifications, preprocessing steps, or hardware assumptions may not permit repetition. Conversely, requiring bit-for-bit identity for every floating-point workflow may be unrealistic and can distract from scientifically meaningful validation. Security controls can introduce performance overhead, administrative complexity, and barriers to collaboration. Encryption, detailed logging, scanning, and isolation should therefore be designed proportionately. Resilience mechanisms can also consume significant energy and storage. A rational design evaluates the cost of protection against the consequences of data loss, interruption, disclosure, or invalid results. The most serious limitation is the possibility of common-cause failure. A shared software defect, compromised administrator account, faulty update, or incorrect workflow definition can affect all replicas and all restarts. Defense in depth, independent validation, separation of duties, and offline or immutable recovery copies reduce—but do not eliminate—this risk. Emerging DirectionsFuture HPC resilience will increasingly combine hardware telemetry, system logs, and machine-learning methods to predict failures and schedule workloads away from vulnerable components. Such prediction must be treated cautiously: false alarms waste resources, while missed failures create unjustified confidence. Persistent memory, burst buffers, erasure coding, nonvolatile storage, and computational storage may reduce checkpoint cost. Workflow systems are becoming more declarative, allowing schedulers to reason about dependencies, retries, provenance, and data locality together. Confidential computing and hardware-enforced memory protection may support sensitive workloads in shared environments, although performance, verification, and trust-boundary questions remain. Reproducibility practices are also moving toward executable research objects: archived combinations of code, data references, environment specifications, workflow definitions, and provenance. Open research infrastructures and standardized metadata can improve reuse, but openness must remain compatible with privacy, licensing, security, and responsible data governance. Best-Practice GuidanceA robust HPC program should: 1. Classify workloads according to value, sensitivity, duration, and tolerance for loss. 2. Define RPO, RTO, recovery procedures, and validation criteria before production execution. 3. Select checkpoint intervals using measured overhead and observed failure behavior. 4. Store validated recovery data across independent failure domains. 5. Use least privilege, multifactor authentication, segmentation, and auditable access controls. 6. Treat containers as packaging tools that require secure images and controlled privileges. 7. Version code, data references, parameters, environments, and workflow definitions. 8. Record provenance automatically wherever possible. 9. Validate scientific outputs after restart and across relevant hardware or software environments. 10. Test recovery, incident response, and reproducibility rather than relying on documentation alone. 11. Document limitations, uncertainty, resource use, and ethical or regulatory constraints. 12. Review resilience and security designs whenever workloads, data, software, or threat conditions change. Chapter SummaryLarge-scale HPC systems must be designed for failure, unauthorized activity, and the need to repeat or audit computational results. Resilience combines prevention, detection, containment, recovery, adaptation, and learning. Checkpoint–restart is flexible and widely applicable, while replication, algorithm-based fault tolerance, error detection, and graceful degradation provide complementary choices. Recovery planning depends on RPO, RTO, checkpoint integrity, independent failure domains, and tested procedures. Security requires protection of identity, authorization, workloads, data, networks, software, and logs. Least privilege, secure multi-tenancy, encryption, monitoring, and incident response form a layered defense. Reproducibility depends on versioned code and data, captured environments, deterministic or controlled randomness, explicit workflows, validation criteria, and provenance. Responsible research connects these technical practices to privacy, scientific integrity, resource stewardship, governance, and human oversight. The strategic goal is trustworthy computation: results that remain available, protected, explainable, and scientifically defensible despite complexity and disruption. Key TermsResilience: The ability of a system to withstand disruption, recover, and continue producing trustworthy service. Fault: An underlying defect or abnormal condition in a system. Error: An incorrect internal state caused by a fault. Failure: A visible interruption, incorrect result, or loss of intended service. Checkpoint: A saved representation of application state used for later recovery. Restart: Resuming a computation from a valid saved state. Replication: Maintaining multiple copies of data, services, or computation. Failure domain: A set of components likely to be affected by the same fault. RPO: The maximum acceptable amount of work or data that may be lost. RTO: The maximum acceptable time required to restore service or computation. Graceful degradation: Continued operation with reduced capability or performance. Least privilege: Granting only the permissions necessary for a task. Multi-tenancy: Use of shared infrastructure by multiple independent users or groups. Provenance: Information describing the origin, transformations, and use of data or results. Reproducibility: The ability to repeat a computation using the same materials and methods. Bitwise reproducibility: Reproduction of exactly identical binary output. Cryptographic checksum: A digest used to detect data alteration or corruption. Defense in depth: Use of multiple independent layers of protection. Idempotence: The property that repeating an operation does not create an unintended additional effect. Incident response: The organized process of detecting, containing, recovering from, and learning from security incidents. Review QuestionsShort Answer Questions1. Distinguish a fault, an error, and a failure in an HPC system. 2. What information should be included in a useful application-level checkpoint? 3. Define recovery point objective and recovery time objective. 4. Why is least privilege important in a shared HPC cluster? 5. What is the purpose of provenance in a computational workflow? Long Answer Questions1. Explain coordinated, uncoordinated, incremental, and application-level checkpointing, including their main trade-offs. 2. Discuss how replication, failure domains, and common-cause failures affect HPC resilience. 3. Develop a layered security architecture for a multi-tenant GPU cluster. 4. Explain why containers alone do not guarantee reproducible or secure computation. 5. Discuss how responsible research principles influence the design of resilient and reproducible HPC workflows. Analytical / Application Questions1. A 48-hour simulation takes 20 minutes to write a checkpoint and runs on a cluster with frequent node failures. Propose a checkpoint and validation strategy, explaining the factors that should determine the interval. 2. A research team has three copies of a dataset, all stored under one administrator account in the same data center. Analyze the resilience and security weaknesses and recommend improvements. 3. Two executions of a parallel machine-learning workflow produce slightly different results after a library upgrade. Design an investigation using provenance, environment capture, numerical validation, and access logs. 22. Multiple Choice Questions with AnswersQuestion 1Which statement best explains why resilience becomes more important as an HPC system grows? A. Large systems eliminate the need for software testing. B. The probability of a component failure during a long computation increases with scale and execution time. C. Large systems always produce incorrect numerical results. D. More processors guarantee that every job can be restarted automatically. Correct Answer: B. The probability of a component failure during a long computation increases with scale and execution time. Question 2What is the principal advantage of application-level checkpointing? A. It saves only the logical state needed by the application and may reduce checkpoint size. B. It guarantees protection against every hardware failure. C. It eliminates the need for checkpoint validation. D. It always produces bitwise-identical results after restart. Correct Answer: A. It saves only the logical state needed by the application and may reduce checkpoint size. Question 3A checkpoint and its replica are stored in the same rack. Which weakness remains? A. The checkpoint cannot contain metadata. B. The replica cannot be encrypted. C. A rack-level failure may destroy both copies. D. Replication always increases corruption. Correct Answer: C. A rack-level failure may destroy both copies. Question 4Which control most directly supports the principle of least privilege? A. Giving every researcher administrator access during experiments. B. Allowing a service account access only to the datasets and operations it requires. C. Sharing one account across all workflow services. D. Disabling audit logs to improve performance. Correct Answer: B. Allowing a service account access only to the datasets and operations it requires. Question 5Which item is most important for distinguishing a software change from an input-data change when results differ? A. A record of provenance containing code and input versions. B. A larger processor allocation. C. A shorter job name. D. A reduction in checkpoint frequency. Correct Answer: A. A record of provenance containing code and input versions. Question 6A recovery point objective of ten minutes means that the organization: A. Must restore the complete system within ten minutes. B. May accept losing no more than approximately ten minutes of work or data. C. Must run every job for at least ten minutes. D. Must use exactly ten replicas. Correct Answer: B. May accept losing no more than approximately ten minutes of work or data. Question 7Why can two parallel executions produce different floating-point results even with the same inputs? A. Floating-point operations are always exact. B. Different scheduling or reduction orders can change rounding behavior. C. Parallel systems cannot store random seeds. D. Checksums deliberately alter numerical values. Correct Answer: B. Different scheduling or reduction orders can change rounding behavior. Question 8Which practice best protects recovery data from unauthorized modification? A. Using the same unrestricted credentials for primary and backup storage. B. Removing all checkpoint metadata. C. Using access controls, integrity checks, and an independent storage failure domain. D. Keeping only one temporary copy on the compute node. Correct Answer: C. Using access controls, integrity checks, and an independent storage failure domain. Question 9What is a limitation of using containers for reproducibility? A. Containers cannot package software dependencies. B. Containers may still depend on unpinned packages, external services, or hardware-specific behavior. C. Containers prevent workflows from being version controlled. D. Containers make provenance impossible. Correct Answer: B. Containers may still depend on unpinned packages, external services, or hardware-specific behavior. Question 10Which action best demonstrates that a recovery plan is operationally credible? A. Writing the plan once and never testing it. B. Increasing job size without monitoring. C. Conducting a recovery exercise using a simulated node or storage failure. D. Deleting old logs after every successful run. Correct Answer: C. Conducting a recovery exercise using a simulated node or storage failure.
|