1. Network Performance Tuning advanced

    A content platform finds that transfers to distant clients achieve far less throughput than the available bandwidth. What are the causes and what tuning applies?

    2 min answer tcp-tuningbandwidth-delay-productcongestion-controlakamai
  2. Network Performance Tuning advanced

    An internal API call takes 40 ms consistently while the server reports 2 ms of processing. Where is the time going?

    2 min answer networknaglelatencytuning
  3. Network Performance Tuning advanced

    An internal fleet is moving service-to-service calls from HTTP/1.1 behind an L4 load balancer to gRPC over HTTP/2. Sequence the migration and say which load-balancing property the team has just deleted.

    3 min answer http2grpcload-balancingconnection-pooling
  4. Network Performance Tuning intermediate

    What happens when a load balancer closes idle connections after 60 seconds while the client's connection pool keeps them for 5 minutes?

    3 min answer keep-aliveidle-timeoutconnection-resetnat
  5. Network Security beginner

    A security questionnaire asks whether data is encrypted in transit and the team answers yes because the load balancer serves TLS 1.3. What happens if an attacker gets code execution on one host behind that load balancer, and what has the TLS answer actually bought?

    2 min answer tlsterminationmtlslateral-movement
  6. Network Security advanced

    All outbound traffic from a cluster passes through an egress proxy that enforces allowlists and TLS inspection. The proxy does not fail; it gets slow, with p99 rising from 20 ms to 6 s. What happens across the platform over the next ten minutes?

    3 min answer egressproxythread exhaustiontimeouts
  7. Network Security intermediate

    An enterprise wants to segment its network so that a compromised application server cannot reach the database directly. What does segmentation actually buy, and what commonly undermines it?

    2 min answer network-securitysegmentationlateral-movementdefence-in-depth
  8. Network Security intermediate

    Review this design. 12 services and 8 engineers in one cloud region. The proposal adds a service mesh with mutual TLS between every pair of services plus per-service microsegmentation policy plus an external policy decision point consulted on every internal call plus envelope encryption with one data key per record. What would you remove?

    3 min answer over-engineeringservice-meshpolicy-decision-pointenvelope-encryption
  9. Network Security advanced

    You propose egress filtering. Engineering says it will break builds and slow delivery. How do you proceed?

    2 min answer network-securityexfiltrationadoption
  10. Network Troubleshooting advanced

    0.5% of requests time out. It is not correlated with any instance, endpoint, customer or time of day. Where do you look?

    2 min answer debuggingnetworktailmethod
  11. Network Troubleshooting advanced

    A configuration push to thousands of edge locations must complete in under a minute, yet a bad config could take down the whole network. How do you reconcile speed with safety?

    3 min answer edgeconfigurationprogressive-rolloutblast-radius
  12. Network Troubleshooting advanced

    A crypto exchange sees intermittent elevated latency to a market-data provider. Servers are healthy, the provider reports no issues, and the problem appears in bursts. How would you diagnose it?

    2 min answer coindcxtroubleshootinglatencypacket-loss