Portfolio ↗

Quiz

2741 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2741 Architecture Fundamentals81 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking86 API & Integration Architecture78 Reliability & Resilience99 Observability92 Performance & Capacity Engineering90 Security Architecture95 Cost Architecture & FinOps92 Business Architecture93 Architecture Communication91 Enterprise Architecture91 Legacy Modernization92 AI-Era Architecture96 Software Architecture & Engineering84 Architecture Patterns84 Architecture Decision-Making91 The Architect's Meta-Skills92 Delivery & Release Engineering93 Platform Engineering & Developer Experience92 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data93 Data Governance & Semantics91 Frontend & Experience Architecture91 Edge, Mobile & IoT88 Regulatory & Data Protection Architecture90 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

98 questions in Assurance, Audit & Model Risk.

  1. AI Risk Tiering advanced

    An enterprise AI provider must apply governance proportionate to risk across many model deployments. How should tiering work?

    2 min answer coherescale-airisk-tieringgovernance
  2. AI Risk Tiering advanced

    An organisation deploys many AI systems with very different risk profiles. How should they be tiered, and which controls attach to each tier?

    2 min answer ai-governancerisk-tieringmodel-riskhuman-in-the-loop
  3. AI Risk Tiering advanced

    How should AI systems be risk-tiered so that governance is proportionate?

    1 min answer ai-governancerisk-tieringproportionalityautonomy
  4. AI Risk Tiering advanced

    The business wants to deploy a model that ranks loan applications, with a credit officer making the final decision. What must the architecture provide, and what will you insist on before go-live?

    2 min answer ai-governancemodel-riskfairnesshuman-oversight
  5. AI Risk Tiering advanced

    Your company is deploying twelve AI features. Compliance wants one governance process for all of them. What do you propose?

    2 min answer ai-governanceriskprocess
  6. Architecture Compliance Checks intermediate

    A policy-as-code gate has run in warn mode for 18 months across 400 repositories. The dashboard shows 2,300 open violations. Leadership asks you to switch it to blocking next month. What happens if you do, and what is the sequence that actually works?

    2 min answer policy-as-codegateswarn-modemigration
  7. Architecture Compliance Checks advanced

    Every infrastructure pull request passes the policy-as-code check. A quarterly scan finds 40 object storage buckets without the required encryption setting and 12 with public access. Nothing has been merged that would create them. Where is the gap?

    3 min answer policy as codedriftruntimeadmission control
  8. Architecture Compliance Checks advanced

    How can architectural standards be enforced automatically, and which standards genuinely cannot be?

    2 min answer governancepolicy-as-codefitness-functionsstandards
  9. Architecture Compliance Checks advanced

    How do you check that implemented systems match agreed architectural decisions, without a review board?

    1 min answer architecture-governancefitness-functionsautomationdrift
  10. Architecture Compliance Checks intermediate

    Which architecture requirements can be checked automatically, and which cannot?

    2 min answer marqetaautomated-checksfitness-functionsjudgement
  11. Assurance, Audit & Model Risk advanced Multiple choice

    A fast-moving engineering organisation must satisfy external assurance requirements without adding a review queue in front of every change. What model works?

    1 min answer assuranceautomationevidencepipeline
  12. Assurance, Audit & Model Risk advanced

    A regulated firm collects control evidence by hand each year for its certification: screenshots, exported spreadsheets, sampled tickets. It wants continuous controls monitoring instead. The certification cycle is mid-flight and the auditor has accepted the current approach. Give the sequence.

    3 min answer continuous controls monitoringcertificationevidencemigration