Learn AI ↗

Quiz

126 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas126 Architecture Fundamentals2 Distributed Systems26 Data Architecture23 Cloud Architecture19 Networking3 API & Integration Architecture1 Reliability & Resilience4 Observability3 Performance & Capacity Engineering3 Security Architecture16 Cost Architecture & FinOps3 Business Architecture2 Architecture Communication2 Enterprise Architecture1 Legacy Modernization2 AI-Era Architecture3 Software Architecture & Engineering3 Architecture Patterns3 Architecture Decision-Making6 The Architect's Meta-Skills1
Difficulty Any beginner intermediate advanced

15 questions in Security Architecture.

  1. Auditability advanced

    Design the audit logging for a system handling financial transactions. What is logged, where does it go, and what makes it hold up?

    2 min answer auditintegrityretentioncompliance
  2. Authentication advanced

    You must roll out MFA to 40,000 employees. Security wants hardware keys; the service desk fears the call volume. Design the rollout.

    2 min answer mfaphishing-resistantrolloutrisk
  3. Authorization advanced

    A document collaboration product needs sharing with individuals, teams, and inherited folder permissions. Which authorization model?

    2 min answer authorizationrebacrbacmodelling
  4. Compliance Frameworks advanced

    PCI DSS assessment covers 40 systems and costs a fortune annually. How would you reduce that architecturally?

    2 min answer pciscopetokenisationcompliance
  5. Security Incident Response advanced

    Anomalous access to a customer database is detected. Walk me through the first day, and say what determines whether you can answer the regulator.

    2 min answer incident-responsebreachforensicsnotification
  6. Privacy Engineering advanced

    Product wants to add "customers who bought this also bought" using purchase history. What does privacy by design require here?

    2 min answer privacypurpose-limitationminimisationgdpr
  7. Secrets Management advanced

    An estate has database passwords in environment variables across 200 services. Design the migration to a secrets manager.

    2 min answer secretsmigrationworkload-identityrotation
  8. Secure API Design advanced

    You are reviewing a new public API before launch. What do you check, in priority order?

    2 min answer api-securityowaspreviewauthorization
  9. Security Architecture advanced

    Equifax was breached in 2017 through a vulnerability with a patch available two months earlier. Beyond "patch faster", what architectural and governance failures does that imply?

    2 min answer complianceprivacyvulnerability-managementcase-study
  10. Security Architecture advanced

    The 2019 Capital One breach chained a server-side request forgery to an over-permissive IAM role. Walk the chain, and say which single control would have contained it.

    2 min answer ssrfiamleast-privilegecloud
  11. Security Architecture advanced

    Your services currently trust anything inside the VPC. A security review says move to zero trust. What changes, and what will it cost you?

    2 min answer zero-trustmtlsidentitysecurity
  12. Supply Chain Security advanced

    A critical CVE is announced in a widely-used library. Walk me through the first four hours.

    2 min answer vulnerabilitysbomresponsepatching