The lead blockchain engineer asked about DNS security and S3 bucket security and how I would go about securing their cloud posture. Mind you, they will want you to talk about API security and how authorization/authentication works but they will not prompt you. In my interview, they said that I lacked knowledge of API authorization/authentication but they failed to ask, so I conclude this as being a interviewer failure.