Pick a focused question that fits your time, stack, and interview goal.
How much time do you have?
Show one-drill sessions you can finish now.
1345 results
Page 11 of 57
Explains password verification, hashing, throttling, generic errors, lockout, and safe login telemetry.
Combines threat modeling, injection containment, data minimization, tenant isolation, tools, audit, incident response, and governance.
Explains dashboard panels that help an API owner see user impact, dependency health, releases, and current incidents.
Places contract, use-case, domain, authorization, and database validation at the boundaries that can enforce each rule consistently.
Designs authenticated, replay-resistant webhook intake with durable acknowledgement, idempotent asynchronous processing, ordering policy, and reconciliation.
Designs a safe admin import flow with upload staging, validation, preview, confirmation, idempotency, and rollback strategy.
Chooses response cache directives for public, private, sensitive, and revalidated API data without leaking user-specific content.
Explains cache-key scope for tenant, user, role, locale, filters, response version, and security-sensitive reads.
Designs comments with permissions, threading, mentions, notifications, editing history, and moderation concerns.
Designs draft, review, publish, rollback, and audit behavior for content managed by editors and admins.
Designs a sharding strategy with a stable key, balanced load, routing, resharding, cross-shard limits, and operational ownership.
Designs deletion, retention, soft delete, hard delete, backups, audit records, and asynchronous cleanup across related data.
Explains why message handlers must tolerate duplicate delivery and how idempotency protects side effects.
Explains how systems behave when the broker is down or slow and how backpressure protects callers and dependencies.
Explains how client-side validation, server-side validation, DTOs, domain rules, and user feedback work together.
Explains health checks that prove an API can serve traffic without becoming fragile dependency probes.
Chooses safe cached, partial, pending, read-only, or unavailable behavior and makes degraded state explicit to clients and operators.
Explains practical UI states for data fetching, empty results, partial failure, retry, and accessible recovery.
Explains list/detail API boundaries, route state, prefetching, selected item behavior, and avoiding over-fetching.
Designs user reports, moderation queues, actions, audit history, abuse controls, and appeal-friendly decisions.
Designs user preferences, channel rules, unsubscribe behavior, digest generation, and delivery suppression.
Design list endpoints with pagination, filtering, sorting, limits, and database-aware performance behavior.
Designs layered public API protection with caller identity, quotas, burst limits, abuse signals, and client-friendly responses.
Designs authorization that combines roles, permissions, tenant context, resource ownership, and auditability.