Portfolio ↗

Quiz

2707 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2707 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience88 Observability81 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture90 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

62 questions in Assurance, Audit & Model Risk.

  1. AI Risk Tiering advanced

    An enterprise AI provider must apply governance proportionate to risk across many model deployments. How should tiering work?

    2 min answer coherescale-airisk-tieringgovernance
  2. AI Risk Tiering advanced

    An organisation deploys many AI systems with very different risk profiles. How should they be tiered, and which controls attach to each tier?

    2 min answer ai-governancerisk-tieringmodel-riskhuman-in-the-loop
  3. AI Risk Tiering advanced

    How should AI systems be risk-tiered so that governance is proportionate?

    1 min answer ai-governancerisk-tieringproportionalityautonomy
  4. AI Risk Tiering advanced

    The business wants to deploy a model that ranks loan applications, with a credit officer making the final decision. What must the architecture provide, and what will you insist on before go-live?

    2 min answer ai-governancemodel-riskfairnesshuman-oversight
  5. AI Risk Tiering advanced

    Your company is deploying twelve AI features. Compliance wants one governance process for all of them. What do you propose?

    2 min answer ai-governanceriskprocess
  6. Architecture Compliance Checks advanced

    Every infrastructure pull request passes the policy-as-code check. A quarterly scan finds 40 object storage buckets without the required encryption setting and 12 with public access. Nothing has been merged that would create them. Where is the gap?

    3 min answer policy as codedriftruntimeadmission control
  7. Architecture Compliance Checks advanced

    How can architectural standards be enforced automatically, and which standards genuinely cannot be?

    2 min answer governancepolicy-as-codefitness-functionsstandards
  8. Architecture Compliance Checks advanced

    How do you check that implemented systems match agreed architectural decisions, without a review board?

    1 min answer architecture-governancefitness-functionsautomationdrift
  9. Assurance, Audit & Model Risk advanced Multiple choice

    A fast-moving engineering organisation must satisfy external assurance requirements without adding a review queue in front of every change. What model works?

    1 min answer assuranceautomationevidencepipeline
  10. Assurance, Audit & Model Risk advanced

    A regulated firm collects control evidence by hand each year for its certification: screenshots, exported spreadsheets, sampled tickets. It wants continuous controls monitoring instead. The certification cycle is mid-flight and the auditor has accepted the current approach. Give the sequence.

    3 min answer continuous controls monitoringcertificationevidencemigration
  11. Assurance, Audit & Model Risk advanced

    How would you provide assurance that controls are operating without a review board?

    2 min answer assurancepreventive-controlsevidenceautomation
  12. Audit Evidence advanced

    Preparing for an audit consumes weeks of engineering time every cycle. What should change architecturally?

    1 min answer audit-evidenceautomationprovenancelogging