Portfolio ↗

Quiz

2988 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2988 Architecture Fundamentals91 Distributed Systems111 Data Architecture100 Cloud Architecture97 Networking96 API & Integration Architecture97 Reliability & Resilience99 Observability92 Performance & Capacity Engineering100 Security Architecture105 Cost Architecture & FinOps102 Business Architecture103 Architecture Communication102 Enterprise Architecture100 Legacy Modernization102 AI-Era Architecture106 Software Architecture & Engineering93 Architecture Patterns94 Architecture Decision-Making101 The Architect's Meta-Skills102 Delivery & Release Engineering103 Platform Engineering & Developer Experience102 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data103 Data Governance & Semantics91 Frontend & Experience Architecture101 Edge, Mobile & IoT98 Regulatory & Data Protection Architecture99 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

5 questions in API Gateway.

  1. API Gateway advanced

    A developer platform's API gateway has accumulated business logic and become a bottleneck for every team. What should be moved out, and what belongs there?

    2 min answer api-gatewayscopebottleneckdistributed-monolith
  2. API Gateway advanced

    A public API is being overwhelmed by a handful of clients. Where should rate limiting live, which algorithm, and how should limits differ across users, tenants, endpoints and infrastructure?

    3 min answer rate-limitinggatewaycloudflaremulti-tenancy
  3. API Gateway advanced

    A ticketing platform at Ticketmaster's on-sale peaks routes everything through one gateway. Gateway to BFF to inventory is three hops and each hop retries up to three times on a timeout or a 5xx. Inventory's p99 crosses its 400 ms timeout at 09:00:02. Walk the next ninety seconds and say where the limit actually has to live.

    3 min answer api gatewayretriesretry budgetadmission control
  4. API Gateway intermediate

    An API gateway has accumulated authentication, rate limiting, routing, response transformation, request validation and some business logic. Which of these belong there?

    2 min answer razorpaygatewaycross-cuttingcoupling
  5. API Gateway beginner

    An API gateway validates every external token and strips the caller's credentials before forwarding, so the order service is configured to trust any request arriving on the internal network. Six weeks later a batch job owned by another team creates refunds against live accounts. Why did the gateway not prevent that, and what is the smallest change that does?

    3 min answer api-gatewayauthenticationauthorisationdefence-in-depth