1. IaC Modules & Drift intermediate

    An organisation's infrastructure code has become a sprawl of copied configurations. What module strategy works, and how is drift handled?

    2 min answer iacmodulesdriftreuse
  2. IaC Modules & Drift advanced

    One Terraform state file holds 4,000 resources across networking, databases, Kubernetes and DNS for production. A plan takes 14 minutes, every change risks unrelated resources, and four teams contend for the lock. You must split it into per-domain states without destroying anything. What is the sequence?

    4 min answer terraformstatemigrationblast-radius
  3. IaC Modules & Drift beginner

    You run `terraform plan` on a production workspace where nothing has been committed for three weeks. The plan proposes 23 changes. Nobody has touched the console. Why does this happen, and what should you do about each kind?

    3 min answer driftterraformprovidersdefaults
  4. IaC Modules & Drift intermediate

    Your infrastructure drift detection fires 200 alerts a day. The team has muted it. How do you make it useful again?

    2 min answer iacdriftalerting
  5. IaC Modules & Drift intermediate Multiple choice

    Your manifests are in Git with `spec.replicas: 6` and the reconciler syncs automatically with self-heal enabled. A platform engineer adds a HorizontalPodAutoscaler for the same Deployment with min 6 and max 40. Traffic doubles at 09:00. What happens over the next ten minutes?

    3 min answer gitopsdriftfield-ownershipserver-side-apply
  6. Identity & Access Management advanced

    A workforce platform holds identity, payroll and device management, and integrates with dozens of downstream systems. What is the central security risk and how is it bounded?

    2 min answer ripplingdeelprivilegeintegrations
  7. Identity & Access Management advanced

    An enterprise platform's permission model has grown to thousands of roles and profiles, and nobody can determine what access a given user actually has. What is the diagnosis and the remediation?

    2 min answer iamrbacabacleast-privilege
  8. Identity & Access Management advanced

    Design the break-glass access mechanism for production. What are the requirements?

    2 min answer accessincidentcontrols
  9. Identity & Access Management intermediate

    Forty developers share one service account to access a partner API because the partner charges per credential. What do you do?

    2 min answer identityattributioncontrols
  10. Idempotency advanced Multiple choice

    A billing platform sends a webhook, the customer's endpoint times out, and the customer's system retries the operation several times. How should idempotency keys, durable event state, delivery attempts, ordering and reconciliation prevent duplicate billing?

    2 min answer chargebeewebhooksidempotencyat-least-once
  11. Idempotency intermediate Multiple choice

    A marketplace checkout calls a payment API. Mobile clients on poor networks time out and retry, and some customers are charged twice. Where exactly must the deduplication record be written for this to be fixed?

    2 min answer idempotencyretriespaymentscorrectness
  12. Idempotency advanced

    A payments API receives the same charge request twice because a mobile client retried after a timeout. How should idempotency keys be scoped, stored, expired and validated, and what happens when the first attempt is still in flight?

    2 min answer stripeidempotencyretriespayments