1. Architecture Styles intermediate Multiple choice

    A news organisation runs a normal publishing platform for most of the year and an entirely different traffic profile on election night. Which architecture style should the read path use, and how does that differ from the style appropriate to the newsroom's editing tools?

    2 min answer architecture-stylesread-pathcachingnew-york-times
  2. Architecture Styles advanced

    You are choosing an architecture style for a new B2B SaaS product. Six engineers. Enterprise customers with data residency requirements in three regions. Which style and why?

    2 min answer stylesmulti-tenancydata-residencymonolith
  3. Artifact Management advanced

    A deployment in one region runs correctly and the same deployment in another fails with a missing configuration key. Both reference image `service:1.8.2`. The registry reports one digest for that tag. How do you diagnose this, and what is the fix?

    4 min answer registrymutable-tagsdigestsreplication
  4. Artifact Management intermediate

    A platform distributes large artefacts to many consumers. What does artefact management need beyond storage?

    2 min answer artifactsimmutabilityretentionprovenance
  5. Artifact Management intermediate Multiple choice

    A team's registry holds every build artefact ever produced: 400,000 container images, 180 TB, growing 6 TB a month, and the storage bill is now material. Which retention policy should they adopt?

    3 min answer artifact-managementretentionrollbackaudit
  6. Artifact Management advanced

    In July 2024 a CrowdStrike content update - not a sensor code release - caused Windows hosts to crash worldwide, with Microsoft estimating about 8.5 million affected devices. The sensor software itself had been through staged release. What does this teach about artefact management, and where would over-correcting be a mistake?

    3 min answer crowdstrikecontent-artefactsstaged-rolloutrollback
  7. Assurance, Audit & Model Risk advanced Multiple choice

    A fast-moving engineering organisation must satisfy external assurance requirements without adding a review queue in front of every change. What model works?

    1 min answer assuranceautomationevidencepipeline
  8. Assurance, Audit & Model Risk advanced

    A regulated firm collects control evidence by hand each year for its certification: screenshots, exported spreadsheets, sampled tickets. It wants continuous controls monitoring instead. The certification cycle is mid-flight and the auditor has accepted the current approach. Give the sequence.

    3 min answer continuous controls monitoringcertificationevidencemigration
  9. Assurance, Audit & Model Risk advanced

    How would you provide assurance that controls are operating without a review board?

    2 min answer assurancepreventive-controlsevidenceautomation
  10. Assurance, Audit & Model Risk intermediate

    Zoom went from about 10 million daily meeting participants in December 2019 to more than 300 million in April 2020, then froze feature development for 90 days to work on security and privacy. What forced that, and which kinds of control break first when demand grows 30x in four months?

    2 min answer zoomsurgecontrolsfeature-freeze
  11. Audit Evidence intermediate

    An audit requires evidence that controls operated throughout the period. How should that evidence be produced?

    2 min answer chargebeeevidenceautomationsampling
  12. Audit Evidence advanced

    Preparing for an audit consumes weeks of engineering time every cycle. What should change architecturally?

    1 min answer audit-evidenceautomationprovenancelogging