Technical Program Manager III, Security, Google Cloud Platform

Google

Tic-tac-toe is played by two players A and B on a 3 x 3 grid. The rules of Tic-Tac-Toe are: Players take turns placing characters into empty squares ''. The first player A always places 'X' characters, while the second player B always places 'O' characters. 'X' and 'O' characters are always placed into empty squares, never on filled ones. The game ends when there are three of the same (non-empty) character filling any row, column, or diagonal. The game also ends if all squares are non-empty. No more moves can be played if the game is over. Given a 2D integer array moves where moves[i] = [rowi, coli] indicates that the ith move will be played on gridrowi. return the winner of the game if it exists (A or B). In case the game ends in a draw return Draw. If there are still movements to play return Pending. You can assume that moves is valid (i.e., it follows the rules of Tic-Tac-Toe), the grid is initially empty, and A will play first. For example: moves = [[0,0],[2,0],[1,1],[2,1],[2,2]] Output: A moves = [[0,0],[1,1],[0,1],[0,2],[1,0],[2,0]] Output: B moves = [[0,0],[1,1],[2,0],[1,0],[1,2],[2,1],[0,1],[0,2],[2,2]] Output: Draw

Google

Let's discuss Access Control Lists (ACLs). Imagine you're designing a system where you need to control access to various resources. How would you approach assigning ACLs to users and groups? Be specific. For example, consider a scenario with files, directories, and applications. How would you define permissions (read, write, execute, delete) and associate them with individual users (like 'john.doe') or groups (like 'developers' or 'administrators')? What different strategies would you evaluate for managing ACLs, and what are the tradeoffs between them in terms of security, performance, and ease of administration? For example, would you use an identity-based approach, a role-based approach, or a combination of both? Consider also how you would handle inheritance of ACLs in a hierarchical structure, such as a file system. How would you prevent privilege escalation and ensure that users only have the access they need? Finally, how would you audit ACL changes and monitor access attempts to detect potential security breaches?

Google

Tell me about a time you had to work with a signed contract. Describe the situation, your role, and the outcome. What were the key clauses or provisions that were most relevant to the situation? What challenges, if any, did you face in interpreting or adhering to the contract terms? How did you ensure that your actions were in compliance with the contract, and what steps did you take to mitigate potential risks or disputes? For example, consider a scenario where you were managing a project with a vendor, and the contract outlined specific deliverables, timelines, and payment terms. A conflict arose when the vendor failed to meet a critical deadline, potentially impacting the project's overall timeline and budget. How did you leverage the contract to address the issue, protect your company's interests, and find a resolution that was fair to both parties? Or, imagine you were involved in a negotiation where the other party wanted to change certain terms after the contract was signed. How did you handle the situation, ensuring that any modifications were properly documented and agreed upon by all parties involved? What did you learn from this experience, and how has it influenced your approach to working with contracts in subsequent projects or situations?