Portfolio ↗

Quiz

2948 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2948 Architecture Fundamentals91 Distributed Systems101 Data Architecture90 Cloud Architecture87 Networking96 API & Integration Architecture87 Reliability & Resilience99 Observability92 Performance & Capacity Engineering100 Security Architecture105 Cost Architecture & FinOps102 Business Architecture103 Architecture Communication102 Enterprise Architecture100 Legacy Modernization102 AI-Era Architecture106 Software Architecture & Engineering93 Architecture Patterns94 Architecture Decision-Making101 The Architect's Meta-Skills102 Delivery & Release Engineering103 Platform Engineering & Developer Experience102 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data103 Data Governance & Semantics91 Frontend & Experience Architecture101 Edge, Mobile & IoT98 Regulatory & Data Protection Architecture99 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

5 questions in Segregation of Duties.

  1. Segregation of Duties advanced

    A financial platform must demonstrate segregation of duties. What is the concrete test, and where does it usually fail?

    2 min answer brexrampsegregationcredentials
  2. Segregation of Duties advanced

    A team owns its service end to end, including deploying to production. How is segregation of duties satisfied?

    1 min answer segregation-of-dutiesdevopspipelineapproval
  3. Segregation of Duties intermediate

    An audit finds 40 engineers with permanent production database read access. The team says they need it for support. Resolve it.

    2 min answer accesscontrolsinsider-risk
  4. Segregation of Duties advanced

    On 27 July 2012 a Knight Capital technician deployed new order-routing code to seven of eight production servers. The eighth kept older code that a repurposed flag then activated on 1 August, and the firm booked a pre-tax loss of about $440 million in roughly 45 minutes. The SEC noted it had no written deployment procedures and no peer review of deployments. Which control would have prevented it, and which would only have reduced the damage?

    2 min answer knight capitaldeploymentsegregation of dutiesverification
  5. Segregation of Duties advanced

    On 5 April 2022 an Atlassian maintenance script deleted 883 customer sites belonging to 775 customers in about 23 minutes. Restoration ran until 18 April, up to 14 days for some customers, although no customer lost more than about five minutes of data. What failed, and which design decisions made that gap between deleting and restoring possible?

    2 min answer atlassianblast-radiussoft-deleterestore