Interview Question Breakdowns
Learn the reasoning, implementation details, and common follow-ups behind each question.
Coding interview: How do you make insert, delete, and getRandom O(1)?
Build RandomizedSet with a hash map and dynamic array, explaining tail-swap deletion, index maintenance, uniform sampling, and the duplicate-value variant.
Backend interview: What does HTTP 511 Network Authentication Required mean?
Separate network authentication from origin authentication, explain the proxy boundary, caching and security risks of 511, and debug captive portals or proxy false positives.
Coding interview: How do you implement a uniform in-place array shuffle?
Use Fisher–Yates to generate every permutation with equal probability in O(n) time and O(1) extra space, while covering random bounds, reset semantics, and testing.
System Design Interview: Design a Low-Latency Feature Flag Evaluation Service
Separate control and data planes to derive local evaluation, sticky bucketing, live updates, safe defaults, and flag cleanup.
Backend Interview: Explain HTTP 103 Early Hints and Preload Trade-offs
Derive the boundary of 103 from RFC 8297 and decide when preload hints, caching, and fallback are worthwhile.
General Interview: Explain HTTP 425 Too Early and 0-RTT Replay Safety
Explain TLS 1.3 early data, 425 semantics, idempotent writes, gateway consistency, and safe retries.
Data Engineering Interview: Design a Reverse ETL Sync to Operational Systems
Design an auditable Reverse ETL service for 3,000 tenants with a 10-minute freshness SLO, destination rate limits, idempotent upserts, and consent-aware deletion.
System Design Interview: Design a Multi-Tenant Feature Entitlement Service
Design the path from subscription changes to low-latency feature decisions, with tenant isolation, revocation, cache consistency, auditability, and failure handling.
Coding Interview: Implement a Radix Tree for Prefix Routing
Build insert, exact lookup, longest-prefix lookup, and delete with path compression, then defend invariants, complexity, and edge cases.
General Interview: How Should You Explain HTTP 507 Insufficient Storage?
Distinguish temporary server resource exhaustion from an oversized request, choose safe retry behavior, and verify the storage boundary with HTTP 507.
General Interview: What Should an HTTP 451 Response Contain, and How Should Clients Handle It?
Derive the boundary between 451 and 403, identify the blocking entity, choose cache behavior, and design client handling and verification from RFC 7725.
Data Engineering Interview: How Do You Evolve a Data Contract Without Breaking Consumers?
Use compatibility classes, lineage impact analysis, CI and runtime gates to answer schema-evolution questions, including deprecation, rollback, and data-quality proof.
Data engineering interview: when should you split streaming pipelines by SLO?
Derive the choice between a shared pipeline, in-graph branches, and independent subscriptions from latency, isolation, and replay requirements, then validate it with production experiments.
System design interview: How would you design federated SPIFFE workload identity?
Design workload identity, attestation, SVID delivery, and cross-cloud trust-domain federation with bounded revocation, isolation, scale, and failure recovery.
Backend interview: How would you design OAuth token exchange for delegated service calls?
Design a secure exchange from an upstream user token to a narrowly scoped downstream token, covering audience, actor, revocation, and auditability.
How does capability-based security prevent the confused deputy problem?
Explain authority as an unforgeable, attenuated reference, contrast capabilities with ambient identity checks, and reason about delegation, revocation, and confused-deputy failures.
How would you implement a gap buffer for a text editor?
Implement cursor movement, insertion, deletion, growth, and invariants for a gap buffer, then explain when a piece table or rope is a better fit.
Should a B2B SaaS invest in SCIM provisioning?
Answer an enterprise product prioritization case by separating buyer evidence, provisioning scope, risk reduction, delivery cost, and measurable rollout gates.
How would you implement A* on a weighted grid?
Implement A* pathfinding with a min-heap, admissible heuristics, stale entries, path reconstruction, and explicit unreachable behavior.
General interview: When should you choose synced versus device-bound passkeys?
Compare synced and device-bound passkeys across recovery, assurance, enterprise governance, and user experience with a risk-tiered policy.
Frontend interview: How would you design safe WebUSB device onboarding?
Use user gestures, Permissions Policy, origin checks, progressive enhancement, and disconnect recovery for browser device access.
Product manager interview: Should a B2B SaaS launch data residency regions?
Evaluate a data-residency product through customer demand, regulatory boundaries, architecture cost, reliability, and verifiable commitments.
Backend interview: How would you safely process archives that may contain decompression bombs?
Design upload, scanning, extraction, and asynchronous processing with budgets for expanded bytes, files, depth, CPU, and disk.
Product manager interview: Should admins be required to use phishing-resistant MFA?
Evaluate mandatory passkeys or security keys for B2B SaaS administrators using risk, segmentation, migration cost, and outcome metrics.