Portfolio ↗

Quiz

2988 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2988 Architecture Fundamentals91 Distributed Systems111 Data Architecture100 Cloud Architecture97 Networking96 API & Integration Architecture97 Reliability & Resilience99 Observability92 Performance & Capacity Engineering100 Security Architecture105 Cost Architecture & FinOps102 Business Architecture103 Architecture Communication102 Enterprise Architecture100 Legacy Modernization102 AI-Era Architecture106 Software Architecture & Engineering93 Architecture Patterns94 Architecture Decision-Making101 The Architect's Meta-Skills102 Delivery & Release Engineering103 Platform Engineering & Developer Experience102 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data103 Data Governance & Semantics91 Frontend & Experience Architecture101 Edge, Mobile & IoT98 Regulatory & Data Protection Architecture99 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

5 questions in Edge Security & Attestation.

  1. Edge Security & Attestation advanced

    A fleet platform decides to require a fresh hardware attestation on every device connection. The gateway issues a nonce, the device returns a boot measurement signed inside its secure element, and only measurements on an allow-list are admitted. The team gets replay resistance and firmware integrity. What have they given up, and when does that bill arrive?

    3 min answer attestationsecure-bootallow-listrecovery-path
  2. Edge Security & Attestation beginner Multiple choice

    A gateway requires each device to prove it is running approved firmware. The device sends a signed measurement of its boot image, and the gateway verifies the signature against the device's registered key. Why is a valid signature not yet evidence that this device is trustworthy right now?

    2 min answer attestationtpmreplaynonce
  3. Edge Security & Attestation advanced

    An attacker has physical possession of one of your devices. What should they be able to obtain, and what protects the rest of the fleet?

    2 min answer attestationphysical-securityleast-privilegesecure-boot
  4. Edge Security & Attestation advanced

    How do you establish that code running on a remote device or accelerator is what you deployed?

    2 min answer attestationsecure-boothardware-rootintegrity
  5. Edge Security & Attestation advanced

    In June 2024 Apple described Private Cloud Compute, where a user's device will only send a request to a server node that cryptographically attests to running a specific software image, and the device checks that measurement against a public append-only transparency log before sending anything. What problem does this solve that signed code and audits do not, what does it cost, and where would copying it be a mistake?

    3 min answer appleattestationtransparency-logconfidential-computing