03Explain the TCP three-way handshake, how a SYN flood exhausts a server, and how SYN cookies defend against it.▼easyNewAmazonGoogleCiscounlockedA classic warm-up that rewards precision: what state the server keeps, why spoofed SYNs cost the attacker nothing, and how SYN cookies move that state into the sequence number.Open full answer →
10Leaf certificate, public key, intermediate or root: what should a client pin, and why did HTTP Public Key Pinning fail on the web?▼hardNewGoogleAppleMicrosoft○ sign inPinning trades availability for a narrower trust set. The answer that scores compares each pin target by what it survives, and uses HPKP's retirement as evidence of what goes wrong.Open full answer →
14Walk through denial-of-service attacks by layer, from volumetric floods to application abuse, and the defence for each.▼mediumNewAmazonGoogleMicrosoft◆ premiumA 2 Tbps flood and one expensive API call per second are both denial of service. The answer that scores matches each attack to the place where it can be stopped, and knows which ones only a provider can absorb.Open full answer →
15What is BGP hijacking, how does RPKI route origin validation help, and what does it not prevent?▼hardNewGoogleAmazonCisco◆ premiumThe internet's routing system still largely believes what networks announce. The strong answer explains why a more specific prefix wins, what RPKI signs, and why path manipulation survives it.Open full answer →
17How do algorithmic complexity bugs and unbounded work cause denial of service, and how do you prevent them?▼mediumNewGoogleAmazonMicrosoft◆ premiumSmall requests that trigger large work are the cheapest denial of service. The scored answer finds the multipliers, bounds every one, and adds the AI-era ones.Open full answer →
14How do you protect a public AI API from denial of service and abuse at the edge?▼mediumNewAmazonGoogleMicrosoft◆ premiumAn AI request can cost a thousand times more than a web request, so volumetric thinking alone fails. The scored answer layers network, request and cost controls, and protects the GPU tier from ever seeing junk.Open full answer →
22Your application routes requests between several models and falls back when one fails. What are the security risks?▼mediumNew◆ premiumA fallback changes the real request path. Review recipient eligibility, state compatibility and uncertain actions before trying another endpoint.Open full answer →
23Which LLM API parameters and features have security implications if you expose them to users?▼mediumNew◆ premiumReview caller-controlled options by their actual information, resource and capability effects. Build a bounded product schema instead of forwarding arbitrary configuration.Open full answer →
08What is unbounded consumption, or denial of wallet, and how do you prevent it?▼easyNewOpenAIAnthropicAmazon○ sign inAn easy question with a revealing follow-up. The answer that scores limits cost at every layer, including the agent loop, not just requests per minute.Open full answer →
12Should LLM guardrails fail open or closed, and how do you handle their latency and cost?▼mediumNewAmazonMicrosoftGoogle◆ premiumThere is no single answer, and saying so is the start. The scored answer decides per check from what its failure would let through, and designs the latency budget so the choice is rarely forced.Open full answer →
15How do rate limits, budgets and loop limits reduce abuse of an AI agent, and how do you set them?▼mediumNew◆ premiumBound work where it is dispatched, account for concurrent branches and retries, and keep uncertain operations reserved. Choose limits from workload evidence and operational capacity, then preserve useful progress when a bound is reached.Open full answer →
23How can one compromised or faulty agent cascade through a system, and what circuit breakers stop it?▼hardNew◆ premiumSeparate false-information spread, borrowed authority and runaway work. Put shared limits and stop checks at the propagation paths, then recover without repeating completed effects.Open full answer →