Portfolio ↗

Quiz

2908 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2908 Architecture Fundamentals91 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture87 Reliability & Resilience99 Observability92 Performance & Capacity Engineering100 Security Architecture95 Cost Architecture & FinOps102 Business Architecture103 Architecture Communication102 Enterprise Architecture100 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering93 Architecture Patterns94 Architecture Decision-Making101 The Architect's Meta-Skills102 Delivery & Release Engineering103 Platform Engineering & Developer Experience102 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data103 Data Governance & Semantics91 Frontend & Experience Architecture101 Edge, Mobile & IoT98 Regulatory & Data Protection Architecture99 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

5 questions in Frontend Security.

  1. Frontend Security advanced

    A consent-management script is loaded synchronously in the document head from a vendor domain because no non-essential tag may run before consent. The vendor's edge degrades to a p99 of 8 seconds rather than returning errors. Walk through what happens second by second what the user sees and what stops it.

    3 min answer third-party-scriptsconsentparser-blockingavailability
  2. Frontend Security advanced

    A financial application runs substantial logic in the browser. What must never be trusted, and what protections are architectural?

    2 min answer growwfrontend-securityvalidationtokens
  3. Frontend Security advanced

    Design the browser-side security posture for an application handling sensitive user files.

    2 min answer frontend-securitycspxsstokens
  4. Frontend Security advanced

    In October 2020 the ICO fined British Airways 20 million pounds over its 2018 breach, in which a modified third-party script on payment pages sent customer card details to an attacker-controlled host, affecting over 400,000 customers. A team proposes a strict nonce-based content security policy in response. What does that buy, what does it cost, and what does it not cover?

    3 min answer cspnoncemagecartthird-party-scripts
  5. Frontend Security advanced

    Marketing wants a new tag manager script on the checkout page. Security objects. Who is right and what do you propose?

    2 min answer supply-chainsecuritybrowser