Portfolio ↗

Quiz

2741 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2741 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience99 Observability92 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

90 questions in Regulatory & Data Protection Architecture.

  1. Erasure vs Immutability advanced

    A brokerage must keep an immutable audit trail and honour erasure requests. How can both be true?

    2 min answer growwerasureimmutabilitypseudonymisation
  2. Erasure vs Immutability advanced

    A marketplace of eBay's shape has an append-only event log of roughly 8 billion events over six years with personal data inline in the payloads. A new erasure obligation lands and crypto-shredding is the chosen answer, but no per-subject keys exist yet. Sequence the migration under live traffic and name the point of no return.

    3 min answer crypto-shreddingevent-sourcingenvelope-encryptionobject-lock
  3. Erasure vs Immutability advanced

    An event-sourced system keeps an immutable log. A subject requests erasure. How is this resolved?

    1 min answer erasureimmutabilityevent-sourcingcrypto-shredding
  4. Erasure vs Immutability advanced Multiple choice

    Your core system is event-sourced. A customer exercises their right to erasure. The events are immutable by design. What do you do?

    2 min answer gdprevent-sourcingdesign
  5. Exit & Concentration Risk advanced

    A regulator asks a financial institution to demonstrate it could exit its cloud provider. What must exist, and what makes the answer credible?

    2 min answer druvaexit-planconcentrationportability
  6. Exit & Concentration Risk advanced

    A regulator asks for evidence that your exit plan from your primary cloud provider is credible. The plan is a twelve-page document. What will they find, and what should you do?

    2 min answer exitconcentration-riskregulatorycloud
  7. Exit & Concentration Risk advanced

    A regulator requires a credible exit plan from a critical cloud provider. What does a genuine exit capability require, and what makes most exit plans fiction?

    3 min answer concentration-riskexit-planportabilityregulation
  8. Exit & Concentration Risk advanced Multiple choice

    Concentration on one cloud provider is a recognised risk. Is multi-cloud the answer?

    1 min answer concentration-riskmulti-cloudexitresilience
  9. Exit & Concentration Risk advanced

    Your entire site is served through one CDN. What happens if that provider has a global outage, and what would you do about it?

    2 min answer cloudflareconcentrationdnsresilience
  10. Exit & Concentration Risk advanced

    Your regulator asks for evidence that your cloud exit plan works. You have a 60-page document. What is the gap?

    2 min answer regulationcloudresilience
  11. Financial Services Regulation advanced

    A national payments rail routes billions of transactions across banks of varying reliability, and a bank switch times out after debiting but before confirming. How should timeouts, deemed status, reconciliation, reversals and customer messaging be designed so money is never lost or double-spent?

    3 min answer upinpcireconciliationdeemed-success
  12. Financial Services Regulation advanced

    A payments institution must satisfy prudential and conduct regulation. Which architectural properties do these requirements actually demand?

    2 min answer phoneperegulationauditsegregation