CTO Emerging Technologies & Innovation 4 — Questions and Answers
Question 1: A CTO is evaluating vector databases for an enterprise RAG (Retrieval-Augmented Generation) system. Which indexing algorithm provides the best balance of query speed and recall accuracy for high-dimensional embedding search at billion-scale?
- B-tree indexing with range partitioning
- Hierarchical Navigable Small World (HNSW) graphs (Correct answer)
- Inverted file index (IVF) with flat quantization only
- Full sequential scan with cosine similarity
Correct answer: Hierarchical Navigable Small World (HNSW) graphs
HNSW graphs provide sub-linear query time with high recall at billion-scale by organizing vectors in a navigable multi-layer graph structure.
Question 2: When a CTO implements an MLOps platform, which practice most effectively prevents model performance degradation caused by data distribution shift in production?
- Retraining the model on a fixed annual schedule regardless of performance metrics
- Implementing continuous monitoring with automated drift detection and triggered retraining pipelines (Correct answer)
- Increasing model complexity to handle all possible future data distributions
- Deploying ensemble models and taking the median prediction
Correct answer: Implementing continuous monitoring with automated drift detection and triggered retraining pipelines
Continuous drift detection with automated retraining pipelines catches distribution shift early and adapts models to new data patterns without manual intervention.
Question 3: In a platform engineering initiative, what is the PRIMARY purpose of an Internal Developer Platform (IDP)?
- Replacing all existing CI/CD pipelines with a vendor-managed SaaS solution
- Providing self-service infrastructure and tooling abstractions that reduce cognitive load on developers (Correct answer)
- Centralizing all deployment decisions under the platform team's direct control
- Standardizing programming languages used across all engineering teams
Correct answer: Providing self-service infrastructure and tooling abstractions that reduce cognitive load on developers
IDPs abstract infrastructure complexity and provide self-service capabilities, enabling developers to focus on product delivery rather than operational concerns.
Question 4: A CTO is considering adopting eBPF (extended Berkeley Packet Filter) for production observability. What is the key advantage over traditional APM agents for this use case?
- eBPF provides higher-level business transaction tracing than code-instrumented APM agents
- eBPF runs in the Linux kernel with minimal overhead and requires no application code changes (Correct answer)
- eBPF agents are installed at the hypervisor layer and are vendor-provided
- eBPF eliminates the need for log aggregation pipelines entirely
Correct answer: eBPF runs in the Linux kernel with minimal overhead and requires no application code changes
eBPF programs run safely in the Linux kernel, capturing deep system telemetry with near-zero overhead without requiring any application instrumentation or restarts.
Question 5: Which zero-trust architecture principle most directly addresses the security risk introduced by SaaS sprawl across an enterprise?
- Perimeter-based network segmentation with VPN for SaaS access
- Continuous verification of identity and device posture for every SaaS access request (Correct answer)
- Blocking all non-approved SaaS applications at the DNS layer
- Requiring all SaaS traffic to route through on-premises data centers
Correct answer: Continuous verification of identity and device posture for every SaaS access request
Zero-trust's continuous verification ensures that even approved SaaS access is validated per-request based on current identity and device health, not just network location.
Question 6: A CTO is assessing spatial computing platforms for enterprise use. What distinguishes Apple Vision Pro's visionOS from traditional VR headsets for enterprise productivity applications?
- It uses a controller-based input system optimized for 3D modeling workflows
- It provides a passthrough mixed-reality environment with eye/hand/voice input integrated with existing 2D app ecosystems (Correct answer)
- It requires custom app development with no compatibility with existing iOS applications
- It operates exclusively as a standalone device with no Mac integration
Correct answer: It provides a passthrough mixed-reality environment with eye/hand/voice input integrated with existing 2D app ecosystems
visionOS combines passthrough mixed reality with native eye, hand, and voice input and runs existing iPad apps, lowering the enterprise adoption barrier compared to pure VR.
Question 7: When deploying AI agents with tool-use capabilities in an enterprise environment, which security control is MOST important to prevent prompt injection attacks from external data sources?
- Encrypting all agent-to-tool communications with TLS 1.3
- Input sanitization and strict separation of instruction context from untrusted data content (Correct answer)
- Rate limiting the number of tool calls an agent can make per session
- Running agent inference on air-gapped on-premises hardware
Correct answer: Input sanitization and strict separation of instruction context from untrusted data content
Prompt injection occurs when untrusted data is interpreted as instructions; separating and sanitizing data inputs from the agent's instruction context is the primary defense.
CTO Emerging Technologies & Innovation 4
A CTO is evaluating vector databases for an enterprise RAG (Retrieval-Augmented Generation) system.
Which indexing algorithm provides the best balance of query speed and recall accuracy for high-dimensional embedding search at billion-scale?