Portfolio ↗

Quiz

2988 questions of the kind that actually get asked — in interviews, in architecture review boards, and by the person who has to run the thing at 3 AM. Every answer states the trade-off rather than the slogan, and says when the obvious choice is the wrong one.

All areas2988 Architecture Fundamentals91 Distributed Systems111 Data Architecture100 Cloud Architecture97 Networking96 API & Integration Architecture97 Reliability & Resilience99 Observability92 Performance & Capacity Engineering100 Security Architecture105 Cost Architecture & FinOps102 Business Architecture103 Architecture Communication102 Enterprise Architecture100 Legacy Modernization102 AI-Era Architecture106 Software Architecture & Engineering93 Architecture Patterns94 Architecture Decision-Making101 The Architect's Meta-Skills102 Delivery & Release Engineering103 Platform Engineering & Developer Experience102 Testing & Quality Architecture102 Data Platform Architecture98 Streaming & Real-Time Data103 Data Governance & Semantics91 Frontend & Experience Architecture101 Edge, Mobile & IoT98 Regulatory & Data Protection Architecture99 Assurance, Audit & Model Risk98
Difficulty Any beginner intermediate advanced

5 questions in Three Lines Model.

  1. Three Lines Model intermediate

    An organisation adopts the three-lines model and it produces friction without assurance. What went wrong?

    2 min answer ripplingthree-linesgovernanceaccountability
  2. Three Lines Model intermediate

    How does the three lines model apply to a technology organisation, and where does it go wrong?

    2 min answer three-linesassuranceownershipindependence
  3. Three Lines Model intermediate

    How does the three-lines model apply to a modern engineering organisation, and what goes wrong when the second line is staffed by people who cannot read the systems?

    2 min answer governanceriskassuranceengineering
  4. Three Lines Model intermediate

    To stop the risk function writing policies nobody can implement, a company embeds two risk engineers inside the platform team to build and operate the policy gate themselves. Time from policy publication to enforcement drops from two quarters to days. What has the company given up, and when does that bill arrive?

    3 min answer three-lines-modelindependencepolicy-as-codecodeowners
  5. Three Lines Model beginner Multiple choice

    Your payroll SaaS vendor emails its SOC 2 Type II report covering January to December. The risk committee marks the vendor risk as covered and closes the item. What has that report actually given you?

    3 min answer soc2third-party-riskcuecassurance