Portfolio ↗

Quiz

2707 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2707 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience88 Observability81 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture90 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

74 questions in Regulatory & Data Protection Architecture.

  1. Erasure vs Immutability advanced Multiple choice

    Your core system is event-sourced. A customer exercises their right to erasure. The events are immutable by design. What do you do?

    2 min answer gdprevent-sourcingdesign
  2. Exit & Concentration Risk advanced

    A regulator asks a financial institution to demonstrate it could exit its cloud provider. What must exist, and what makes the answer credible?

    2 min answer druvaexit-planconcentrationportability
  3. Exit & Concentration Risk advanced

    A regulator asks for evidence that your exit plan from your primary cloud provider is credible. The plan is a twelve-page document. What will they find, and what should you do?

    2 min answer exitconcentration-riskregulatorycloud
  4. Exit & Concentration Risk advanced

    A regulator requires a credible exit plan from a critical cloud provider. What does a genuine exit capability require, and what makes most exit plans fiction?

    3 min answer concentration-riskexit-planportabilityregulation
  5. Exit & Concentration Risk advanced Multiple choice

    Concentration on one cloud provider is a recognised risk. Is multi-cloud the answer?

    1 min answer concentration-riskmulti-cloudexitresilience
  6. Exit & Concentration Risk advanced

    Your entire site is served through one CDN. What happens if that provider has a global outage, and what would you do about it?

    2 min answer cloudflareconcentrationdnsresilience
  7. Exit & Concentration Risk advanced

    Your regulator asks for evidence that your cloud exit plan works. You have a 60-page document. What is the gap?

    2 min answer regulationcloudresilience
  8. Financial Services Regulation advanced

    A national payments rail routes billions of transactions across banks of varying reliability, and a bank switch times out after debiting but before confirming. How should timeouts, deemed status, reconciliation, reversals and customer messaging be designed so money is never lost or double-spent?

    3 min answer upinpcireconciliationdeemed-success
  9. Financial Services Regulation advanced

    A payments institution must satisfy prudential and conduct regulation. Which architectural properties do these requirements actually demand?

    2 min answer phoneperegulationauditsegregation
  10. Financial Services Regulation advanced

    An exit plan requirement must be credible and tested. What does that mean for how you build?

    2 min answer exit-planportabilitylock-inregulation
  11. Financial Services Regulation advanced

    What does financial services regulation demand of architecture that a general-purpose system does not provide?

    1 min answer financial-servicesauditresiliencereporting
  12. Geo-Restriction & Sanctions advanced

    A platform must block access from sanctioned jurisdictions and restrict content by market. How is this implemented and where does it fail?

    1 min answer sanctionsgeo-blockingscreeningevasion