1. Flow Metrics intermediate

    Which delivery flow metrics reveal where the constraint actually is, and what do they typically show?

    2 min answer flow-metricslead-timewait-timeconstraints
  2. Frontend & Experience Architecture advanced

    A browser-based design tool must render complex documents at sixty frames per second while several people edit simultaneously. What does that force in the client architecture?

    2 min answer frontendcanvaswasmperformance
  3. Frontend & Experience Architecture advanced

    A product manager asks why the app feels slower on Android than on iOS when it is the same web application. Walk me through what you investigate and what you tell them.

    3 min answer device-classperformancefield-datamain-thread
  4. Frontend & Experience Architecture advanced

    In 2015 Flipkart built Flipkart Lite as a progressive web app after a period of pushing users to its native app. The published case study on web.dev reports time on site rising from about 70 seconds to about 3.5 minutes with 3x lower data usage and 63% of those users arriving over 2G. What problem forced the decision what did it actually buy and where would copying it be a mistake?

    2 min answer flipkartprogressive-web-appreachdevice-class
  5. Frontend & Experience Architecture intermediate

    What decides whether a product should render on the server or the client?

    2 min answer renderingperformancedevicesseo
  6. Frontend & Experience Architecture intermediate

    Zoom told investors that daily meeting participants rose from about 10 million in December 2019 to a peak above 300 million in April 2020. You own the browser client for a product facing that shape of growth. An interviewer asks what must already exist in the client architecture before the surge and what cannot be added during it. How do you answer?

    3 min answer zoomdemand-surgeremote-configgraceful-degradation
  7. Frontend Security advanced

    A consent-management script is loaded synchronously in the document head from a vendor domain because no non-essential tag may run before consent. The vendor's edge degrades to a p99 of 8 seconds rather than returning errors. Walk through what happens second by second what the user sees and what stops it.

    3 min answer third-party-scriptsconsentparser-blockingavailability
  8. Frontend Security advanced

    A financial application runs substantial logic in the browser. What must never be trusted, and what protections are architectural?

    2 min answer growwfrontend-securityvalidationtokens
  9. Frontend Security advanced

    Design the browser-side security posture for an application handling sensitive user files.

    2 min answer frontend-securitycspxsstokens
  10. Frontend Security advanced

    In October 2020 the ICO fined British Airways 20 million pounds over its 2018 breach, in which a modified third-party script on payment pages sent customer card details to an attacker-controlled host, affecting over 400,000 customers. A team proposes a strict nonce-based content security policy in response. What does that buy, what does it cost, and what does it not cover?

    3 min answer cspnoncemagecartthird-party-scripts
  11. Frontend Security advanced

    Marketing wants a new tag manager script on the checkout page. Security objects. Who is right and what do you propose?

    2 min answer supply-chainsecuritybrowser
  12. Functional vs Non-Functional intermediate

    "Interview. Etsy has millions of sellers listing handmade items and buyers browsing and searching them. Give me the functional requirements in thirty seconds, then tell me which non-functional requirement actually determines the architecture, and why." How should a strong candidate answer?

    1 min answer nfrmarketplacesearchetsy