1. Incident Management intermediate

    An observability platform's incident process treats all incidents with the same severity and process. What problems does this create, and how should severity be defined?

    2 min answer incident-managementseverityescalationdatadog
  2. Incident Management advanced

    Incidents at your company are chaotic: unclear ownership, no communication, and postmortems that produce nothing. Design the improvement.

    2 min answer incidentrolesseveritypostmortem
  3. Incident Management intermediate

    You are incident commander. Error rate is 8% and rising, cause unknown. What do you do in the first ten minutes?

    2 min answer incidentcommandmitigationcommunication
  4. Security Incident Response advanced

    A blockchain infrastructure provider suspects a compromised credential with access to production. What must the response prioritise, and what capability determines how well it goes?

    2 min answer polygonincident-responsecontainmentforensics
  5. Security Incident Response advanced

    A platform discovers that an attacker has held valid credentials for an unknown period. What does the response require beyond containment, and what determines how well it goes?

    2 min answer incident-responseforensicscredentialsdisclosure
  6. Security Incident Response advanced

    Anomalous access to a customer database is detected. Walk me through the first day, and say what determines whether you can answer the regulator.

    2 min answer incident-responsebreachforensicsnotification
  7. Security Incident Response intermediate

    At 09:00 a customer reports that a report they exported contains another customer's records. You have the on-call. Walk me through your first hour, and tell me what architectural question you would ask on day two.

    3 min answer incident responsemulti-tenancycontainmentforensics
  8. Security Incident Response advanced

    You discover an attacker holds valid credentials in your environment. What are your first three actions and what must already exist for them to be possible?

    2 min answer incident-responsecontainmentforensicscredentials
  9. Indexing intermediate Multiple choice

    A query filters on `lower(email)` and there is an index on `email`. The query is slow and the plan shows a sequential scan. Why, and what are the fixes?

    2 min answer indexingquery-plandebuggingdatabase
  10. Indexing advanced

    A search platform receives continuous document updates while users expect newly published content to appear quickly. How should indexing pipelines, replicas, refresh intervals, cache invalidation and query serving be separated?

    2 min answer elasticsearchfreshnessrefresh
  11. Indexing advanced

    A source-code platform must make code across millions of repositories searchable, where repositories differ enormously in size and activity. Which indexing decisions dominate, and what makes this different from indexing documents?

    2 min answer indexingsearchcode-searchgithub
  12. Indexing intermediate

    A table has 14 indexes and writes have become slow. How do you decide which to remove?

    2 min answer indexingwrite-performancereview