Question bank

4,310 interview questions, answered.

Reference answers, what the interviewer is really testing, how it is graded, and the follow-ups that come next.

Easy 190Medium 2,498Hard 982
Filters · onDifficulty, topic, company

2,498 questions

  1. 2449A red admin reads invoice I1 with private fields. The API caches by invoice ID. A red viewer may see only summary fields and later receives that cache entry. The database query was tenant-scoped. Diagnose and repair.MediumTechnical
  2. 2450A preview endpoint needs three known HTTPS hosts. The first URL is allowed but redirects internally; another allowed response streams without end. Specify controls and local verification.MediumTechnical
  3. 2451A key appears publicly at 09:00, the page is removed09:20, and the key is revoked 09:35. It could create other credentials. Logs begin 09:10. What does 'rotated, closed' omit?MediumTechnical
  4. 2452An OIDC trust rule accepts any token from the CI issuer with environment=production. Another repository can use that environment name, and the resulting role can create administrators. Identify distinct remaining risks.MediumTechnical
  5. 2453A rule requires three distinct successful secret reads before a policy update within fifteen event-time minutes. A reference set contains 20 confirmed positive sequences and separately labelled benign sequences. The rule produces exactly 15 unique true-positive alerts and five unique false-positive alerts, with no other alerts; repeated deliveries have been deduplicated. Five reference positives are missed. Evaluate it before paging.MediumTechnical
  6. 2454Two people named Priya work at the same company. The user asks the agent to email Priya a confidential report. Search returns both as active. Design the next step and the evidence required before sending.MediumSystem designAI ML
  7. 2455A tool says the document update succeeded but notification delivery failed. The agent wants to retry the whole tool. Repair its result schema and recovery decision.MediumSystem designAI ML
  8. 2456A research agent reads a useful page containing a command to upload all source documents. Explain what can be retained and what must be rejected.MediumAI MLTechnical
  9. 2457A coordinator has spent 35 units from a 150-unit ceiling. Two workers reserve 40 and 30. Can it start a 50-unit branch? Show the accounting and completion update if the first worker uses 25.MediumDataAI ML
  10. 2458An import request committed dataset D4, but its reply was lost. The retry uses the same account and operation key with a changed input file. Specify the response and stored-state checks.MediumSystem designTechnical
  11. 2459Two departments each read allocated budget 90 from a shared limit of 100, then add 10 to different rows. Show the bad schedule and a valid control.MediumSystem designTechnical
  12. 2460A warehouse receives two distinct event IDs for one order confirmation. Event-ID deduplication passes both. How should allocation correctness be protected?MediumSystem designTechnical
  13. 2461An external reservation times out. A signed callback later has the expected key but the wrong passenger. What should the application do?MediumSystem designTechnical
  14. 2462A provider budget is 15 calls/s. Each job uses 3 calls; arrivals continue at 3 jobs/s. Estimate drain time for 480 extra jobs, then state the assumptions.MediumDataSystem design
  15. 2463A full export requires every eligible row. Transfer dominates request time. Why is adding LIMIT 50 not a valid optimization, and what alternatives preserve the contract?MediumSystem designTechnical
  16. 2464A project update checks login but updates by project ID alone. Write one review comment with a trigger, consequence, and verification.MediumCodingSystem design
  17. 2465You must teach webhook retries to developers who know HTTP but have never operated event consumers. State the outcome, prerequisites, and what belongs on separate reference pages.MediumProductTechnical
  18. 2466A local deduplication demo uses an in-memory set and prints the expected total. What must the author state before a learner copies it into a service?MediumTechnical
  19. 2467A sample throws a JSON parsing error because it received a 404 HTML page. Write a short diagnostic explanation for learners.MediumTechnical
  20. 2468Half the workshop cannot finish setup and fifteen minutes remain. Preserve the learning objective with an honest fallback.MediumSystem designProduct
  21. 2469This fictional API returns 403 for both an expired session and insufficient write scope. Five learners report 403; a controlled reproduction confirms two expired-session cases and three missing-write-scope cases. Produce an engineering-ready feedback plan.MediumProductTechnical
  22. 2470There are 80 attendees, 50 guided completions, 24 survey responses, and 12 self-reported later uses among those 24 survey respondents. What may the program report?MediumDataTechnical
  23. 2471Prepare a six-minute explanation showing why duplicate delivery does not mean duplicate business intent. Include one prediction and a fresh transfer question.MediumBehavioralTechnical
  24. 2472Edit a guide that says retries guarantee one email and tells users to try again after any error. Supplied facts are at-least-once delivery, possible consumer restart, and a provider with an operation-key contract.MediumBehavioralTechnical