1. Authorization advanced

    A multi-tenant platform must guarantee that one customer can never see another's data. Where should that check live, and what makes the guarantee credible?

    2 min answer workosmulti-tenancyisolationauthorization
  2. Authorization advanced

    A workspace product has pages nested arbitrarily deep, with permissions inheritable and overridable at any level, shared with individuals, groups and guests. How should authorization be designed so checks stay fast and correct?

    2 min answer authorizationpermissionsinheritancecaching
  3. Authorization advanced

    An internal API accepts a customer ID and returns that customer's data. It authenticates the calling service with mTLS. What is the flaw?

    2 min answer authorizationconfused-deputyzero-trust
  4. Autoscaling advanced

    A live-streaming platform expects viewer count to increase tenfold within minutes when a major event begins. Its services autoscale on CPU. Predict what happens and what the design should be instead.

    2 min answer autoscalingpre-scalinglive-eventstwitch
  5. Autoscaling advanced

    A service autoscales on CPU. During incidents it never scales out, even as latency triples. Why, and what would you scale on instead?

    2 min answer autoscalingmetricssaturation
  6. Autoscaling advanced

    A traffic ramp after a quiet period saturates a managed network component that scales automatically but not fast enough. Degradation cascades. Analyse.

    2 min answer slackscalingmanaged-servicesramp
  7. Autoscaling advanced

    A workload has extreme bursts lasting a few minutes, triggered by scheduled real-world events. Should the architecture use autoscaling, pre-provisioned capacity, queues, caching, admission control, serverless, or a combination?

    2 min answer dream11burstautoscalingpre-provisioning
  8. Autoscaling advanced

    Your capacity plan relies on autoscaling to handle traffic spikes. Why might that fail exactly when needed?

    2 min answer autoscalingresiliencecapacity
  9. Availability Mathematics intermediate Multiple choice

    A service depends on four components, each independently 99.9% available, called in sequence on every request. What is the resulting availability, and what does this imply about architecture?

    2 min answer availabilitydependenciesredundancymath
  10. Availability Mathematics intermediate

    A stakeholder requires 99.99% availability. Your service depends on five internal services each offering 99.9%. What do you say?

    2 min answer availabilitydependenciesrequirements
  11. Availability Mathematics advanced

    A stakeholder wants a video streaming service at 99.99% availability. Walk through whether that is the right target and what it would take.

    2 min answer netflixslocostrequirements
  12. Availability Zones advanced

    A marketplace runs across three availability zones in one region. What actually happens when one zone fails, and which common design choices turn a survivable zone failure into an outage?

    2 min answer availability-zonesfailure-domainscapacityebay