1. Reference Models advanced

    Four years ago a platform team adopted a cloud vendor's landing-zone reference architecture whole: hub-and-spoke network, three subscription tiers, a central firewall appliance, a shared CI account. The estate turned out to be three products and 40 engineers. The appliance adds a 12 ms hop to every internal call and caused two of the last five incidents. Auditors were told the architecture "conforms to the vendor reference". Sequence the migration to a simpler topology without losing the audit story.

    3 min answer reference-modelslanding-zonetailoringaudit
  2. Single vs Multi-Region advanced

    A B2B scheduling platform runs in one US region. 38% of revenue now comes from Australia and Europe, where p95 page load is 1.9 s against 420 ms in North America, and churn in those markets runs 2.3x the US rate. The team chooses one home region per tenant with a full stack in each, not global replication. Give the sequence under live traffic, say where data can diverge, and name the point of no return.

    3 min answer multi-regiontenant-pinningcutoverdual-write
  3. Single vs Multi-Region advanced

    A collaborative product must decide between single-region, multi-region read replicas, and multi-region writable. What should decide it?

    2 min answer multi-regionlatencycomplexitylocal-first
  4. Single vs Multi-Region beginner

    A single-region service already runs across three availability zones. After a four-hour incident at a cloud provider in a neighbouring region, the board asks for a second region. The team's own two-year incident log reads: eleven incidents, nine caused by its own deploys or configuration changes, two by the loss of a single zone. What does a second region add that a third zone does not, and what does that log say about the request?

    3 min answer multi-regionavailability-zonesfailure-domainsincident-history
  5. Single vs Multi-Region advanced

    A stakeholder asks for multi-region. What three questions do you ask before agreeing?

    2 min answer multi-regionresidencylatencyavailability
  6. Single vs Multi-Region advanced

    A team must decide whether to run in one region or several. What evidence justifies multi-region, and what does it cost?

    2 min answer flyiomulti-regionlatencyavailability
  7. Regulatory & Data Protection Architecture advanced Multiple choice

    A global enterprise application must satisfy different regulatory regimes per market. Where should regulatory logic live?

    1 min answer regulatoryconfigurationpolicy-as-codemulti-jurisdiction
  8. Regulatory & Data Protection Architecture beginner Multiple choice

    A support tool's credentials are found in a public repository. The GDPR's Article 33 gives 72 hours from becoming aware of a personal data breach to notify the supervisory authority, including the categories and approximate number of data subjects affected. Which capability decides whether you can answer in time?

    3 min answer gdprbreach-notificationdata-inventoryaccess-logs
  9. Regulatory & Data Protection Architecture advanced

    How do you make a data residency requirement a structural property rather than a policy?

    2 min answer residencycellscontrol-planeenforcement
  10. Regulatory & Data Protection Architecture beginner

    Marketing has signed with an analytics vendor and the vendor's SDK is due in next week's mobile release. Legal asks whether you are the controller or the processor for what that SDK collects. Why does the answer change the architecture rather than only the paperwork?

    2 min answer controllerprocessorsub-processorssdk
  11. Regulatory Constraints advanced

    A company operates one platform across many countries with different regulatory regimes, payment rails and tax rules. How should the architecture handle variation without forking per country?

    2 min answer mercado-libremulti-countryregulationconfiguration
  12. Regulatory Constraints advanced

    A financial-services group has 14 months before a new operational-resilience regime applies. It must hold a complete register of third-party arrangements supporting critical functions, documented and tested exit plans for each, and contractual clauses that roughly 40% of its 180 supplier contracts do not contain. The programme plans to build the register first because it is the visible deliverable. Sequence the work properly and name the point of no return.

    3 min answer regulationthird-party risksequencingexit plans