Which two statements are correct regarding the Actuator info endpoint? (Choose two.)

Question

Options

• AIt provides configuration options through which only an authenticated user can display
• BIt is not enabled by default.
• CIt can be used to display arbitrary application information.
• DIt can be used to change a property value on a running application.
• ETypically it is used to display build or source control information.

• A
  4% (1)
• C
  93% (25)
• D
  4% (1)

Explanation

Options C and E are correct because the /actuator/info endpoint is a read-only display endpoint designed to surface arbitrary application metadata - anything you configure under info.* properties or via custom InfoContributor beans - and its most common real-world use is exposing build details (via META-INF/build-info.properties) and Git commit/branch data (via git.properties), making both statements accurate descriptions of its purpose and capability.

A is wrong because the info endpoint has no built-in authentication mechanism of its own; access control is handled externally by Spring Security, and by default the endpoint is accessible without authentication.

B is wrong because the info endpoint is enabled by default (management.endpoint.info.enabled=true); you may need to explicitly expose it over HTTP in newer Spring Boot versions, but "not enabled" is inaccurate.

D is wrong because info is strictly read-only - changing a running property value is the job of the /actuator/env endpoint (via POST), not /info.

Memory tip: Think of /info as a read-only bulletin board - you post information to it (build metadata, git info, custom properties), and anyone with access can read it. Anything involving writing, changing, or securing goes to a different endpoint.

No community discussion yet for this question.