01Walk me through what actually happens when an LLM generates a response.▼easyOpenAIAnthropicGoogle188 views2 repliesunlockedThe warm-up that quietly filters out candidates who only know LLMs as a magic API. Nail the two-phase inference picture and you set up every later answer about latency, cost, and hallucinations.Open full answer →
03What is a token, and why should an FDE care about tokenization?▼easyOpenAIAnthropicCohere1 repliesunlockedTokens drive your customer's bill, their latency, and the weird failures like botched arithmetic. The rough numbers every FDE should rattle off, plus the trap answers interviewers listen for.Open full answer →
04What is a context window, and what are its practical limits in production?▼easy★ EssentialOpenAIAnthropicGoogle104 views1 repliesunlockedEveryone can define it; few candidates know why 'advertised context' and 'usable context' aren't the same thing. The cost, latency, and attention caveats that make this answer stand out.Open full answer →
05Explain temperature and top-p. When would you run temperature 0 in an enterprise workflow?▼easyOpenAIAnthropicCohere1 repliesunlockedA deceptively simple sampling question with one trap (does temperature 0 fix hallucinations?) and one senior move interviewers reward. Know which workflows want zero.Open full answer →
06What are embeddings, and how do they make semantic search work?▼easyCohereOpenAIGlean1 repliesunlockedThe concept underneath every RAG system you'll ever deploy. How to explain vectors, cosine similarity, and the one limitation of embeddings that costs real deployments accuracy.Open full answer →
08What's the difference between a base model and an instruct model, and why would a customer care?▼easyAnthropicMistralCohere1 repliesunlockedWhy a raw base model answers your question with three more questions, what RLHF actually buys, and the niche cases where customers should pick base. A tidy answer most candidates fumble.Open full answer →
09Why do LLMs hallucinate?▼easy★ EssentialAnthropicOpenAIScale2 repliesunlockedEvery FDE will face an angry customer asking this. The mechanistic explanation interviewers want (why hallucination is the default behavior, not a bug) plus the framing that defuses customer escalations.Open full answer →
10You're building a classifier that flags risky contract clauses. Do you optimize for precision or recall?▼easyScaleMicrosoftOpenAI1 repliesunlockedA classic metrics question with a domain twist. The answer isn't 'recall'; it's a cost-of-errors argument plus a threshold strategy, and interviewers grade the reasoning, not the metric you pick.Open full answer →
46Decoder-only, encoder-only, encoder-decoder: what is each good at, and why does generation use decoder-only?▼easyOpenAIGoogleAnthropic1 replies◆ premiumThree transformer families, one distinction that decides everything: which tokens are allowed to see which. The attention mask is the whole answer, and it explains why GPT generates and BERT does not.Open full answer →
01Walk me through a RAG pipeline end-to-end, and tell me where it usually breaks▼easyOpenAIScaleCohere86 views3 repliesunlockedThe warm-up that filters out tutorial-level candidates. Interviewers aren't grading the diagram, they're grading whether you know the three places real pipelines fail and how you'd see it happening.Open full answer →
02How would you chunk documents for retrieval, and how do you know your chunking is good?▼easy★ EssentialCohereScaleHarvey1 repliesunlockedEveryone says '500 tokens with overlap.' The candidates who get hired explain why chunk boundaries are a recall problem, name three strategies, and describe the experiment that picks between them.Open full answer →
03Keyword search vs vector search: what does each actually buy you in a RAG system?▼easy★ EssentialGleanOpenAICohere1 repliesunlockedPure vector search fails on the exact queries enterprise users ask most: IDs, error codes, product names. Here's the failure-mode framing that turns a definition question into a design answer.Open full answer →
04When is an agent the wrong answer? Argue against building one.▼easyAnthropicSierraOpenAI2 repliesunlockedArguing against agents reads senior; it's an explicit rubric signal at AI labs. Learn the cost ladder from single call to autonomous loop, and the three conditions that actually justify an agent.Open full answer →
05How would you evaluate a RAG system before letting a customer launch it?▼easy★ EssentialOpenAIAnthropicScale1 repliesunlocked'Evals first' is the #1 hiring signal in FDE design rounds. This is the foundational version: what a 50-case golden set looks like, which metrics split retrieval from generation, and the launch gate that convinces interviewers.Open full answer →
01Two Sum: return indices of the two numbers that add to a target▼easy★ EssentialMetaScalePalantir1 repliesunlockedThe most common screen opener, and interviewers use it to check whether hashmap thinking is reflexive. Here's the one-pass answer, the narration that earns points, and the duplicate-handling edge case most candidates fumble.Open full answer →
02Group anagrams: cluster a list of strings into anagram groups▼easyMetaGleanScale1 repliesunlockedA 5-minute warm-up that quietly tests the most useful idea in practical coding: choosing a canonical key. The sorted-string vs character-count tradeoff is exactly what interviewers want to hear you reason about.Open full answer →
03Merge overlapping intervals▼easyPalantirMetaOpenAI1 repliesunlockedThe interval pattern shows up everywhere in FDE loops: calendars, flight segments, log windows. Master the sort-then-sweep idiom here and three other interview questions fall out for free.Open full answer →
04Insert a new interval into a sorted, non-overlapping interval list▼easyPalantirMeta1 repliesunlockedThe follow-up interviewers reach for when merge-intervals goes too smoothly. The three-phase scan is elegant, but only if you've internalized the overlap condition most candidates have to re-derive under pressure.Open full answer →
05Top-K frequent elements▼easy★ EssentialMetaGleanOpenAI2 repliesunlockedTop-K is the most reused primitive in FDE interviews: it reappears inside log parsers, analytics questions, and retrieval ranking. Three solutions exist; knowing which one to lead with is the real test.Open full answer →
06Count subarrays whose sum equals K▼easyMetaScaleOpenAI1 repliesunlockedLooks like a sliding-window problem; isn't one. The prefix-sum + hashmap trick that solves it is the same idea behind sessionization and cumulative-metrics questions later in the loop: learn it once, reuse it three times.Open full answer →
07Design a class that returns the moving average of the last N values in a stream▼easyOpenAIGleanRetool2 repliesunlockedThe gentlest 'design a class' question in FDE screens, and the warm-up interviewers use before rate limiters and sessionization. The deque trick is easy; the API and time-window follow-ups are where the signal is.Open full answer →
08Build a wc-lite: count lines, words, and characters in text, with flags, factored for extension▼easyAnthropicRetoolOpenAI1 repliesunlockedAnthropic-style screens open with deceptively simple builds like this, then extend them three times. The grade isn't the counting; it's whether your first version survives the extensions without a rewrite.Open full answer →
58Given a list of inference latencies, compute the p95 and explain percentile indexing.▼easyOpenAIAnthropicGlean1 replies◆ premiumEveryone quotes p95 in latency SLOs, but few can compute it without a library and fewer can explain why the index is ceil(p*n)-1, not p*n. The warm-up that screens whether you actually understand the metric you live by.Open full answer →
59Compute the cosine similarity between two embedding vectors, handling the zero-vector case.▼easyOpenAICohereGlean1 replies◆ premiumThe arithmetic is three sums; the signal is what you do when a vector is all zeros and the denominator vanishes. The warm-up that gates every RAG and retrieval coding round.Open full answer →
60Parse a JSON-lines file of LLM logs and aggregate tokens generated per request.▼easyOpenAIAnthropicGlean1 replies◆ premiumReal LLM logs are JSONL, not JSON, and real log files have a malformed line halfway through. The warm-up that screens whether you can stream a file and aggregate without one bad record nuking the whole run.Open full answer →
61Write a generator that yields fixed-size batches from a large iterator for streaming inference.▼easyOpenAIAnthropicHugging Face1 replies◆ premiumBatching inputs is how you keep a GPU fed, but the source is an iterator you cannot index or len(). The warm-up that screens whether you can write a lazy generator that handles the ragged final batch.Open full answer →
62Maintain a sliding-window average over a stream of metrics, like tokens/sec.▼easyOpenAIAnthropicDatadog1 replies◆ premiumA dashboard needs the average tokens/sec over the last N seconds, updated on every sample, forever. The warm-up that screens whether you evict by time and keep a running sum instead of re-summing the window each call.Open full answer →
01Explain precision, recall and F1, and which one matters for a fraud-detection customer?▼easy★ EssentialGoogleScaleMicrosoft2 repliesunlockedEvery FDE loop opens with this, but the definitions are table stakes. What gets scored is whether you can map each metric to a dollar cost the customer recognizes, here's the framing that does it.Open full answer →
02Your model has 0.95 ROC AUC. The customer is unimpressed in production. What does AUC actually tell you?▼easyGoogleScaleMeta1 repliesunlockedA 0.95 AUC model can still flood a review queue with garbage. Knowing when ROC AUC flatters a model, and what to report instead, separates FDEs who've shipped from those who've only run notebooks.Open full answer →
03Explain the bias-variance tradeoff, and how it shows up in a real customer deployment.▼easy★ EssentialGoogleMicrosoftDatabricks1 repliesunlockedThe textbook answer gets a polite nod. The version that names which side of the tradeoff a 6-week customer pilot usually dies on gets the hire signal, here's that version.Open full answer →
04How do you detect overfitting, and walk me through the tools you'd use to fix it.▼easy★ EssentialGoogleDatabricksMicrosoft1 repliesunlocked"Use regularization" is the answer everyone gives. The ordered toolbox, and which tool to reach for first when a customer's pilot model collapses in week two, is what actually gets scored.Open full answer →
07Explain k-fold cross-validation, and when would you refuse to use it?▼easyGoogleDatabricksMicrosoft1 repliesunlockedEveryone can describe the five folds. The question is really about the second half, the two data shapes, both everywhere in enterprise data, where standard k-fold quietly lies to you.Open full answer →
09Explain gradient descent to me like I'm a smart engineer who's never done ML. What can go wrong?▼easy★ EssentialGoogleMetaScale1 repliesunlockedA two-minute explanation, then the real test: learning-rate pathologies, why we use mini-batches, and the one practical diagnosis, reading a loss curve, that customer-facing engineers actually need.Open full answer →
12What does cosine similarity actually measure, and why is it the default for comparing embeddings?▼easyGoogleDatabricksScale1 replies○ sign inEvery RAG deployment runs on this math, and most candidates can't say why cosine beats Euclidean, or when the two are secretly identical. The 90-second version with a worked example.Open full answer →
13A customer wants to segment 2 million users. Walk me through clustering, k-means, choosing k, and where it goes wrong.▼easyGoogleSnowflakeMicrosoft1 replies○ sign inUnsupervised questions filter out candidates who've only done Kaggle. The elbow method is the warm-up, the real scoring is on validation without labels and the marketing-team handoff.Open full answer →
18Explain what a p-value actually is, to me, and then to a customer's VP of Marketing.▼easyMetaGoogleMicrosoft1 replies○ sign inMost working data scientists state the definition wrong, and interviewers know exactly which wrong versions to listen for. The correct one-sentence definition, the VP translation, and the three classic traps.Open full answer →
49Core difference between machine learning and deep learning, and when would you pick classical ML over a neural net?▼easyDatabricksGoogleScale1 replies◆ premiumThe honest version: deep learning learns its own features but is hungry for data and compute, and on a customer's 50,000-row tabular dataset a gradient-boosted tree wins on accuracy, cost, and time-to-ship. The dividing line and the conditions that flip it.Open full answer →
50What are Type I and Type II errors? Use an enterprise spam filter to make it concrete and tie each to a business cost.▼easyGoogleMicrosoftDatabricks1 replies◆ premiumA Type I error blocks a real invoice; a Type II error delivers the phishing email. Which one costs the customer more decides where you set the threshold. The spam-filter framing, the precision/recall mapping, and the asymmetric-cost call interviewers want.Open full answer →
54What is a confusion matrix, and give a concrete case where accuracy is misleading.▼easyGoogleMicrosoftScale1 replies◆ premiumA confusion matrix is the 2x2 of right and wrong predictions per class, and it is the reason a 99% accurate fraud model can be useless. The worked imbalance example, and how reading the matrix as precision and recall fixes the lie.Open full answer →
55What is a validation set for, and how do you use it during training without overfitting to it?▼easyGoogleDatabricksMicrosoft1 replies◆ premiumThe validation set is the one you tune and select on; the test set is the one you only look at once. Confusing them, or tuning so hard you overfit the validation set, is how a model that aced offline metrics dies in production.Open full answer →
01What's the difference between RANK, DENSE_RANK and ROW_NUMBER, and when does the choice actually matter?▼easy★ EssentialSnowflakeMetaRetool2 repliesunlockedThe classic SQL screener at Snowflake and Meta. Everyone can recite the definitions, interviewers are listening for the one scenario where picking the wrong function silently corrupts your results.Open full answer →
02Find the second-highest (or Nth-highest) salary per department.▼easyMetaMicrosoftRetool1 repliesunlockedA 40-year-old SQL classic that still filters out half of candidates, because of ties, NULLs, and departments with one employee. The interview-proof solution fits in six lines.Open full answer →
04A table has duplicate rows for the same business key. Write SQL to keep only the latest version of each.▼easyRetoolMetaPalantir1 repliesunlockedEvery pipeline eventually double-loads data, so every FDE screen eventually asks this. There's one canonical idiom, plus a determinism detail that decides whether your dedupe is rerun-safe.Open full answer →
05Why did my LEFT JOIN start behaving like an INNER JOIN after I added a WHERE filter?▼easyRetoolMetaMicrosoft2 repliesunlockedThe most common bug in analyst SQL, and a favorite warm-up in Retool's debugging-flavored screens. One word's placement, ON vs WHERE, silently deletes your unmatched rows.Open full answer →
10After adding a join, your row count and revenue totals exploded. What happened and how do you detect it?▼easy★ EssentialPalantirRetoolMeta2 repliesunlockedJoin fan-out is the bug behind half of all 'the dashboard numbers are wrong' escalations an FDE will ever field. The mechanism, the 30-second detection query, and the three legitimate fixes.Open full answer →
11Pivot rows to columns in SQL, without using the PIVOT keyword.▼easySnowflakeRetoolMicrosoft1 replies○ sign inAsked constantly because it tests whether you understand aggregation rather than syntax. The CASE-inside-aggregate idiom works on every engine, plus when to reach for Snowflake's PIVOT and its dynamic variant.Open full answer →
15Why is Parquet the default for analytics? What does columnar storage actually buy you over CSV?▼easyDatabricksSnowflakePalantir1 replies○ sign inA warm-up that quietly reveals whether you understand why analytical engines are fast at all. Compression, projection, predicate pushdown, and the one workload where columnar is the wrong choice.Open full answer →
24ETL vs ELT, what changed, and when is classic ETL still the right call?▼easy★ EssentialSnowflakePalantirMicrosoft1 replies◆ premiumSounds like a definition question; it's actually a judgment question. The economics that flipped the industry to ELT, and the four cases (starting with PII) where transforming before load is still non-negotiable.Open full answer →
34Write SQL for click-through rate by ad in October, then monthly average star ratings per Marketplace product.▼easySnowflake1 replies◆ premiumThe two reported Snowflake SQL-screen warmups. Both look trivial; both have a silent-failure trap, integer division and divide-by-zero in one, the EXTRACT(MONTH) year-collision in the other.Open full answer →
01What's the difference between at-least-once and exactly-once delivery, and why should an FDE care?▼easyOpenAIRetoolDatabricks1 repliesunlockedEvery queue, webhook, and retry loop you'll ever deploy at a customer hides this distinction. Interviewers use it to separate people who've shipped from people who've read about shipping.Open full answer →
02Explain how rate limiting works, fixed window, sliding window, token bucket. When does each break?▼easy★ EssentialOpenAIAnthropicGlean1 repliesunlockedA staple at OpenAI and Anthropic in both coding and design rounds. Most candidates can name the algorithms; few can say which one lets 2x your limit through, and that's the part that gets scored.Open full answer →
03What do p50, p95, and p99 latency actually mean, and why do production engineers obsess over the tail?▼easyVercelOpenAIMicrosoft2 repliesunlockedAverages lie, and interviewers know most candidates quote them anyway. The fastest way to sound production-grade in any latency discussion is to reason about percentiles correctly, including the one trap almost everyone falls into.Open full answer →
04What is a dead-letter queue, and how do you handle a poison message in production?▼easyRetoolMicrosoftDatabricks2 repliesunlockedOne malformed message can silently wedge an entire pipeline, and it happens at every customer eventually. The DLQ answer interviewers want covers what most candidates forget: what happens *after* the message lands there.Open full answer →
05It's Friday evening at a customer site and they want a hotfix shipped now. How do you do it safely, and when do you refuse?▼easyPalantirRetoolMicrosoft2 repliesunlockedThis isn't a deployment question, it's a judgment question wearing one. Interviewers are scoring whether you have a decision framework, a safety checklist, and the spine to say no to a customer politely.Open full answer →
02Why customer-facing instead of pure engineering? Convince me you won't quit in a year.▼easy★ EssentialPalantirOpenAIDatabricks1 repliesunlockedThis is a flight-risk filter, not small talk, FDE teams lose hires back to pure SWE roles constantly. The answer that passes is built on evidence, not enthusiasm. Here's what it sounds like.Open full answer →
03This role is 50–75% travel, sometimes living at customer sites for weeks. Honestly, how will you handle that?▼easyPalantirDatabricksSnowflake1 repliesunlockedThere's no trick here, except that interviewers are listening for one specific word: a plan. The candidates who fail give enthusiasm; the ones who pass give logistics.Open full answer →
05Tell me about learning an unfamiliar domain fast. How fast, and how did you validate you understood it?▼easyHarveyPalantirScale AI1 repliesunlockedFDEs change domains every deployment, so interviewers test for a repeatable learning system, and most candidates fail the second half: proving the understanding was real. Here's the method and the validation move.Open full answer →
07Tell me about a time you said 'no' to a customer, and they thanked you for it later.▼easy★ EssentialDatabricksSnowflakeSierra3 repliesunlockedThe 'thanked you later' clause is the trap, it rules out both the pushover story and the stubborn-engineer story. What's left is a specific skill, and interviewers know exactly what it sounds like.Open full answer →
12Explain RAG to our Chief Legal Officer in two minutes. She's brilliant, busy, and non-technical.▼easyHarveyAnthropicOpenAI1 replies○ sign inGraded on two things most engineers never practice: the quality of the analogy and knowing when to stop. Here's a two-minute script that lands with a legal exec, and the depth trap to avoid.Open full answer →
14An exec asks point-blank: 'Can it be 100% accurate?' Answer without lying, and without losing the deal.▼easyHarveyAnthropicSierra1 replies○ sign inSay 'yes' and you've failed the integrity test; say 'no' flatly and you've failed the deal. The pass is a three-beat answer that turns the question into the reason to buy. Here's the script.Open full answer →
17Here's an engineer's status update full of jargon. Rewrite it as the steering-committee email.▼easyPalantirMicrosoftDatabricks1 replies○ sign inA live translation test of the FDE's core skill: same facts, different altitude. There's a four-line formula execs actually read, and one translation error that destroys trust.Open full answer →
31How do you keep yourself updated on AI and LLMs?▼easyDistylSalesforceScale AI1 replies◆ premiumSounds like a softball; it's a filter. 'I read newsletters and follow people on X' is the answer that loses. Interviewers are listening for a system with a build loop, here's one you can describe and actually run.Open full answer →
45Explain to a non-technical CFO why your deployed generative model gives different answers each run, and why that's expected, not a bug.▼easyAnthropicHarveySierra1 replies◆ premiumThe CFO ran the same prompt twice and got two answers, and now thinks the system is broken. The analogy that lands in one sentence, the honest framing that keeps trust, and the exact case where you'd set temperature to zero to make it repeat.Open full answer →
46Walk me through your first 30, 60, and 90 days in a new customer-facing engineering role.▼easyOpenAIPalantirAnthropic1 replies◆ premiumThe graded shape is specific: learn and ship something small by day 30, own a deployment by day 60, drive a cross-customer improvement by day 90. Vague answers about 'meeting stakeholders and ramping up' fail. Here is the staged plan with what good looks like at each gate.Open full answer →
71Why this company specifically?▼easyNewPalantirOpenAIAnthropic2 replies◆ premiumAsked in every loop, prepared for by almost nobody, and it has a single mechanical test that tells you whether your answer is any good before you ever say it out loud.Open full answer →
01How is CI/CD for ML models different from traditional DevOps CI/CD?▼easyAmazonMicrosoftCapital One1 repliesunlockedThe standard AWS ML Engineer opener. Most candidates recite 'data and model versioning' and stall, the answer interviewers score highest explains why ML tests can't be pass/fail and what continuous training adds as a third loop.Open full answer →
02What are your day-to-day responsibilities as an MLOps engineer?▼easy★ EssentialAmazonMicrosoftJPMorgan2 repliesunlockedAn experience probe that sinks more candidates than any design question, because a vague answer ends the interview early. The four-plane structure that proves you're an operator, not a data scientist with MLOps on the resume.Open full answer →
03What is MLflow for, and what are its four components?▼easyDatabricksAmazonMicrosoft1 repliesunlockedA textbook screen with a non-textbook scoring rubric. Naming Tracking, Projects, Models, and Registry gets you a pass, knowing which component nobody actually uses, and why, gets you the offer conversation.Open full answer →
04Why use a model registry instead of just storing model artifacts in S3?▼easyAmazonJPMorganCapital One2 repliesunlockedThe trap is that S3 versioning sounds like a complete rebuttal, it isn't, and interviewers at banks know exactly why. What a registry adds that storage never can, and the audit question that decides regulated-industry offers.Open full answer →
05What problem does a feature store solve? Explain the online store versus the offline store.▼easy★ EssentialUberCapital OneNetflix1 repliesunlockedCandidates describe a feature store as 'a database for features' and fail, it's a consistency machine with two faces. The online/offline split, the latency numbers each side must hit, and when you shouldn't build one.Open full answer →
06What's the difference between shadow deployment and A/B testing a model?▼easyNetflixCapital OneGoogle2 repliesunlockedThey answer different questions, and mixing them up costs you the round: one tests your engineering, the other tests your model's business impact. What each can and cannot catch, and the order a strong candidate always runs them in.Open full answer →
07When you say you 'push staging to production,' what does that actually mean for a model?▼easyAmazonDatabricksMicrosoft1 repliesunlockedA real interview question designed to catch resume inflation: candidates say 'we promote to production' and can't name the API call. What actually moves when a model is promoted, and the answer that proves you've done it.Open full answer →
01Explain how the CUDA execution model maps to hardware, grids, blocks, warps, SMs.▼easyNVIDIAGoogleCoreWeave3 repliesunlockedThe NVIDIA warm-up that exposes whether you've written a kernel or just called .cuda(). The mapping from software hierarchy to silicon explains every GPU performance conversation that follows.Open full answer →
02Walk me through the GPU memory hierarchy, registers, shared memory, L2, HBM. What lives where and why?▼easyNVIDIAxAIMeta1 repliesunlockedKernel optimization is mostly the art of feeding 100+ TFLOPs from the small fast end of this hierarchy. Know the rough latencies and bandwidths, interviewers listen for the numbers.Open full answer →
03What is warp divergence and why does it hurt performance?▼easyNVIDIAxAI1 repliesunlockedA staple NVIDIA screen with a precise mechanical answer, and a follow-up trap about which branches actually diverge that catches most candidates.Open full answer →
07Have you worked on machine learning GPU workloads?▼easyNVIDIACoreWeaveTogether AI1 repliesunlockedSounds like small talk; it's actually a depth probe with follow-ups pre-loaded. A scoping framework that works whether you've run 4 GPUs or 4,000, and the bluff that ends interviews.Open full answer →
18What experience do you have with ML infrastructure, including distributed GPU clusters?▼easyCoreWeavexAIOpenAI1 replies○ sign inThe resume-walk question for infra roles, with a hidden rubric: layer ownership, scale fluency, and one defensible war story. How to answer credibly at any actual scale, and the inflation tells interviewers catch.Open full answer →
21Explain continuous batching vs static batching for LLM serving.▼easy★ EssentialTogether AIOpenAICoreWeave1 replies◆ premiumWhy the batch is a pool of decode slots, not a bus that waits until it's full. The mental-model shift behind every modern serving stack, and the scheduling tradeoffs interviewers push on next.Open full answer →
01Explain direct vs indirect prompt injection, and how each one actually breaks an LLM application.▼easy★ EssentialOpenAIMicrosoftGlean2 repliesunlockedOWASP's LLM01 is the opening question of nearly every AI security screen. Most candidates can define direct injection; the ones who get hired explain why indirect injection is the one that ruins enterprise deployments.Open full answer →
02How is a jailbreak different from prompt injection? Give an example of each from a real application.▼easyAnthropicMicrosoftScale1 repliesunlockedCandidates use these terms interchangeably and security interviewers notice immediately. The distinction, whose policy is being violated, drives completely different defenses, and that's the actual question.Open full answer →
03Why do system prompts leak, and what should never be in one?▼easyOpenAIAnthropicSalesforce1 repliesunlockedOWASP made system prompt leakage its own category (LLM07) because teams keep treating prompts as secrets. The strong answer flips the premise: design so extraction doesn't matter.Open full answer →
05What is 'excessive agency' in an agentic system, and what controls actually limit it?▼easyOpenAIAnthropicSalesforce1 repliesunlockedOWASP LLM06 is where AI security stops being novel and becomes a least-privilege problem, which is exactly why interviewers love it. The control list is short; knowing which control to lead with is the test.Open full answer →
14Compare PII detection methods, regex, entropy, NER, external APIs. Why can't regex alone find a person's name?▼easyMicrosoftSnowflakeGlean1 replies○ sign inA deceptively simple screener: each detection method maps to a PII class, and the 'why not regex for names' sub-question has a precise answer about structure vs context that interviewers use as the pass bar.Open full answer →
18The customer asks: 'Will you train on our data?' Give the precise answer, and explain zero-data-retention.▼easyOpenAIAnthropicGlean1 replies○ sign inThe most-asked question in every enterprise AI deal, and precision is pass/fail: the contractual answer, what ZDR actually changes, and the retention nuance that separates FDEs from demo engineers.Open full answer →
21What is SOC 2, what's the difference between Type I and Type II, and what will a customer's security review ask you for?▼easyGleanScaleSalesforce1 replies◆ premiumSOC 2 fluency is the price of admission to enterprise deals, and interviewers check it with two traps: what a SOC 2 report actually proves, and what it doesn't. Engineers who can read one are rarer than you'd think.Open full answer →