Move from mechanism → debugging → secure system design → measurable consulting value. Use the cards for rapid review, then practise the prompts, cases, labs, and project-defence drills.
Stable concept1 · Python, APIs & SQL
Mutability, generators, typing, exceptions, async I/O, bounded concurrency, timeouts, cancellation, transient retries with jitter, idempotency, strict validation, dependency injection, tests, structured logs, trace IDs, joins, CTEs, windows, null semantics, indexes, and transactions.
Checkpoint: explain why retries need both a policy and an idempotency contract.
Stable concept2 · ML / DL foundations
Split data by the unit that can leak; choose precision, recall, F1, PR curves, calibration, and thresholds by error cost. Know bias–variance, cross-entropy, perplexity limits, overfitting, distribution shift, and why a simple baseline makes incremental value measurable.
Checkpoint: defend a safety-classifier threshold under alert-capacity constraints.
Stable concept3 · Transformers & tokens
Explain embeddings; scaled dot-product attention softmax(QKᵀ/√dₖ)V; heads; positional information; residual/normalization blocks; causal masks; encoder, decoder, and encoder–decoder tendencies; tokenizer-dependent cost; decoding; KV cache; and quadratic attention growth.
Checkpoint: draw training vs autoregressive inference without claiming temperature guarantees truth.
Stable concept4 · Embeddings & retrieval
Cosine, dot product, Euclidean distance, normalization, compatible dimensions, exact kNN vs ANN/HNSW, metadata filters, BM25, hybrid retrieval, reciprocal-rank fusion, Recall@k, Precision@k, MRR, and nDCG. Re-embed and rebuild when changing embedding spaces.
Checkpoint: explain why exact identifiers often need lexical search.
Stable concept5 · Production RAG
Acquire → parse/OCR → preserve layout → dedupe → chunk → enrich metadata → embed → index → validate → version. At query time: route/rewrite → retrieve → fuse → rerank → dedupe → pack → answer with citations → abstain. Diagnose retrieval, generation, citation, and freshness separately.
Checkpoint: select chunk size using labelled queries, quality, tokens, p95 latency, and cost—not folklore.
Stable concept6 · Structured output & tools
Syntax, schema, semantics, authorization, and business validity are separate layers. The model proposes calls; application code allowlists, authorizes, validates, executes, correlates, limits, audits, and asks for approval. Treat tool results as untrusted data and make side effects idempotent.
Checkpoint: design a refund tool that remains safe after a timeout or injected tool result.
MCP details vary7 · Agents, MCP & memory
Prefer deterministic workflows when steps are known. Agents need explicit state, permitted tools, budgets, failure transitions, checkpoints, approvals, and terminal conditions. Distinguish working, episodic, semantic, and procedural memory; design consent, provenance, TTL, deletion, tenant isolation, and conflict handling.
Checkpoint: MCP standardizes integration; it does not make a server or tool trustworthy.
Stable concept8 · Evals & observability
Version representative, edge, adversarial, multilingual, and unanswerable cases. Gate ingestion, retrieval, reranking, groundedness, citations, refusal, tool success, safety, latency, and cost separately. Calibrate LLM judges against people; compare paired baselines; trace every component with privacy controls.
Checkpoint: define a release gate that catches a retrieval regression hidden by fluent answers.
Stable concept9 · Security & privacy
Direct and indirect prompt injection, sensitive disclosure, supply-chain and poisoning risks, unsafe output handling, excessive agency, vector/embedding weaknesses, misinformation, and unbounded consumption require defence in depth. Enforce ACLs before context assembly; minimize and redact traces.
Checkpoint: delimiters and secret prompts are hints, not security boundaries.
Stable concept10 · RAG vs fine-tuning
Use RAG for fresh/private knowledge, citations, updates, and deletion. Fine-tune behaviour, style, classification, formatting, or repeated tool patterns only after a prompt/retrieval baseline and held-out eval. PEFT can reduce training/storage cost; it does not turn weights into an auditable database.
Checkpoint: name the failure layer before choosing a remedy.
Product/version-sensitive11 · Microsoft / Azure
Clarify current Microsoft Foundry vs classic resource/API generations. A defensible option combines Entra ID, managed identity/RBAC, Azure OpenAI/Foundry deployments, Azure AI Search hybrid retrieval, governed sources, justified compute, Key Vault, private networking, APIM, Application Insights, CI/CD eval gates, and rollback.
Checkpoint: verify names, routes, API/SDK versions, preview status, regions, quotas, and pricing that morning.
Stable concept12 · Architecture & operations
Start with users, answerability, sensitivity, traffic, SLOs, action risk, quality, and budget. Use stateless APIs, external state, queues, backpressure, scoped caches, model routing, circuit breakers, rate limits, load tests, versioned artefacts, canaries, and observable rollback.
Checkpoint: allocate the latency budget across gateway, retrieval, reranking, model, and tools.
Project / consulting signal13 · Defensible communication
Answer with claim → mechanism → measurement → trade-off → production control. For behavior, use Situation → your scope → actions and alternatives → measured result → learning. State baselines, failures, evidence, ownership boundaries, client impact, rollout, and responsible-AI controls.
Checkpoint: replace “we used RAG” with an evaluated decision and a quantified trade-off.
Use each as a 3–7 minute drill. The criteria guide coverage; they are not scripts or claims about an employer’s exact questions.
1 · Explain a transformer to a software engineer
Cover tokens/embeddings, Q/K/V attention and scaling, heads, positions, feed-forward/residual/normalization, causal masking, training vs inference, and long-context cost.
2 · Design chunking for annual reports, scanned contracts, and wikis
Compare layout/heading/table-aware parsing, parent–child chunks, overlap, metadata, OCR validation, and an empirical sweep.
3 · Correct context, hallucinated answer: diagnose
Separate retrieval, packing, conflicting/stale context, instruction, model, decoding, and citation failure; propose layer-specific evals.
4 · Keyword vs vector vs hybrid vs reranked retrieval
Use identifier, jargon, and paraphrase examples; discuss filters, RRF, first-stage recall, reranker latency, and measured trade-offs.
5 · RAG or fine-tuning?
Discuss fresh/private knowledge, behaviour adaptation, citations/deletion, data quality, PEFT, held-out evals, cost, and combined use.
6 · Build a safe refund agent
Define schemas, authorization, deterministic limits, idempotency, approval, audit, injection resistance, budgets, error states, and task-success evals.
7 · What is MCP—and what is it not?
Explain host/client/server, JSON-RPC, resources/prompts/tools, capability negotiation and consent; interoperability does not guarantee trust.
8 · Design memory for a customer assistant
Cover memory types, consent, provenance, scope, retrieval, conflict, TTL, deletion/export, tenant isolation, and summary loss.
9 · Evaluate an enterprise RAG release
Dataset, retrieval/answer/citation/refusal/safety metrics, human and calibrated LLM judges, paired baseline, CI gate, monitoring, and slices.
10 · Reduce LLM latency and cost
Instrument first; prune context, right-size models, parallelize I/O, stream, cache safely, batch offline work, bound agents, and protect quality.
11 · Describe a Microsoft/Azure production architecture
Clarify Foundry generation, identity/RBAC, Search, networking, governed sources, compute, Key Vault, APIM, monitoring, CI/CD, and data policy.
12 · Explain prompt injection to a client leader
Give direct/indirect examples, business impact, why secrecy/delimiters fail, and capability-based defence in depth.
13 · Walk through a difficult Python production bug
Show reproduction, traces, hypothesis, fix, tests, rollback, and prevention for async blocking, retry storms, mutable state, or fan-out.
14 · A project failed an evaluation
Use evidence-rich STAR: own scope, quantify failure, find root cause, communicate, change the system, and add a regression control.
15 · Turn a vague GenAI request into a consulting plan
Discovery, baseline, source readiness, use-case priority, risk, prototype, acceptance metrics, pilot, governance, ROI, change management, and exit criteria.
1 · Pan-India employee policy assistant
Brief: 50,000 employees; English/Hindi; SharePoint/PDF; HR ACLs; p95 < 4 s; citations. Cover: identity propagation, security trimming, layout/OCR, multilingual hybrid retrieval, freshness, reranking/citations, abstention, private Azure option, eval slices, SLO/cost, ACL-scoped caches.
2 · Confidential due-diligence analyst
Brief: compare deal-room files across entities/years. Cover: engagement isolation, file validation, table/layout extraction, entity/date metadata, decomposition, parent–child retrieval, page evidence, no cross-deal cache, retention/legal hold, human review, quantitative accuracy, bounded spend.
3 · Banking support agent with actions
Brief: answer products, fetch status, block cards—never transfer funds. Cover: deterministic router, RAG, scoped tools, reauthentication, confirmation, absence of transfer capability, idempotency, budgets, injected tool output, support paths, audit, policy evals.
4 · Developer copilot over repositories
Brief: explain code, find ownership, suggest patches, open a PR after approval. Cover: symbol-aware plus hybrid retrieval, commit metadata and ACLs, sandbox tests, supply-chain scan, diff review, approval, secret safety, untrusted integrations, acceptance metrics.
5 · Multilingual citizen-services assistant
Brief: English/Hindi/Marathi, low-bandwidth mobile, frequent policy change, accessible. Cover: authoritative sources, multilingual/hybrid search, concise streaming, citations/escalation, freshness SLO, safety, offline constraints, and evaluation by language/literacy/geography.
6 · 10,000-calls-per-minute support RAG
Brief: global, 99.9%, p95 < 2.5 s, strict unit economics. Cover: capacity, autoscaling, admission control, bounded retrieval/reranking, model escalation, scoped/versioned caches, streaming, circuit breakers, regional strategy, graceful degradation, load and cost tests.
7 · Contract-risk extraction pipeline
Brief: 40 clause types, strict schema, cited spans, lawyer review. Cover: queue, OCR/layout, constrained extraction, deterministic validation, calibrated evidence, exact spans, clause evals, review queue, lineage/reprocessing, residency/deletion, batch economics.
8 · Enterprise agent platform on Azure
Brief: shared guardrails, tools, and monitoring for many business units. Cover: control/data planes, Foundry-generation clarity, project boundaries, identity/RBAC, approved catalogue, tool gateway, policy as code, network isolation, eval/red-team gates, tracing, quotas, registry, kill switch, rollback.
Each lab should produce a small repo/notebook, README, tests/eval data, measured results, and a two-minute explanation—without secrets or proprietary data.