Portfolio ↗

Quiz

2707 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2707 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience88 Observability81 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture90 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

62 questions in Assurance, Audit & Model Risk.

  1. Bias & Fairness Controls advanced

    A lending model shows different approval rates across demographic groups. The business asks you to "make it fair". What do you do?

    2 min answer fairnessmlgovernance
  2. Bias & Fairness Controls advanced

    A model used in underwriting must be demonstrably fair. What controls are architectural, and what is the hard part?

    2 min answer digitfairnesssubgroupsproxies
  3. Bias & Fairness Controls advanced

    A model's outcomes differ across demographic groups. What can architecture actually do about it?

    2 min answer fairnessbiasmeasurementtradeoffs
  4. Bias & Fairness Controls advanced

    An interviewer says — you run architecture for a consumer lending platform. The regulator expects evidence that your model is not producing disparate outcomes across ethnic groups. Legal tells you that you may not collect applicants' ethnicity. Where do you take this?

    3 min answer fairnessproxy-inferencebisgmeasurement
  5. Certification Impact on Architecture advanced Multiple choice

    An online retailer collects card numbers in a form on its own checkout page and posts them to a payment provider. 240 engineers can deploy the checkout service and the annual PCI DSS assessment is consuming three months of engineering time. Which single change most reduces the assessed scope?

    3 min answer pci-dssscope-reductiontokenisationcertification
  6. Certification Impact on Architecture advanced

    An organisation pursues a security certification. How should that change the architecture, and how should it not?

    2 min answer certificationcontrolsscopearchitecture
  7. Certification Impact on Architecture advanced

    How does pursuing a certification change how you design, beyond adding controls?

    2 min answer certificationscopeboundariesevidence
  8. Change Advisory vs Automated Gates advanced

    A change advisory board reviews all production changes. Engineering wants automated gates. What is the actual trade?

    1 min answer change-managementcabautomationrisk
  9. Change Advisory vs Automated Gates advanced

    A payments and ride-hailing platform of Grab's shape replaced its weekly change advisory board with automated gates fourteen months ago. At 23:40 a configuration change reaches production through the emergency path and skips the canary stage. By 23:46 card authorisations are failing in two markets; recovery takes 51 minutes. The review finds that 38% of production changes in the previous quarter used the emergency path, median approval 90 seconds by whoever was on call. What failed?

    3 min answer change-controlbreak-glassdeployment-gatescoverage
  10. Change Advisory vs Automated Gates advanced

    An organisation's change advisory board is slow and, by its own incident data, is not preventing failures. What should replace it, and what genuinely requires human review?

    2 min answer change-managementgatesautomationdora
  11. Change Advisory vs Automated Gates advanced

    How would you replace a change advisory board without weakening control?

    2 min answer change-managementautomationgatesevidence
  12. Change Advisory vs Automated Gates advanced

    Reddit's 14 March 2023 outage ran 314 minutes after a Kubernetes 1.23 to 1.24 upgrade removed the node-role.kubernetes.io/master label that Calico route reflector selectors depended on, and Kubernetes has no supported downgrade. Sequence the next cluster upgrade so a gate can actually block it.

    3 min answer redditkubernetesupgradeautomated-gates