A comprehensive technical interview preparation guide covering ISO 14229 protocol architecture, diagnostic session transitions, seed-key cryptography, fault codes, and bootloader flashing.
Technical interview questions on UDS protocol invariably test candidate comprehension of the OSI 7-layer model and ISO 14229 sub-standards. Candidates must articulate how UDS operates at Layer 7 (Application Layer) independently of physical layers such as CAN (ISO 11898), CAN-FD, and Automotive Ethernet (DoIP, ISO 13400). Key questions evaluate understanding of physical versus functional addressing (0x7DF broadcast vs 0x7E0 point-to-point), ISO 15765-2 (ISO-TP) multi-frame packet segmentation (Single Frame, First Frame, Flow Control, and Consecutive Frame), and standard positive response (+0x40) versus negative response (0x7F) formatting.
In automotive diagnostic interviews, questions on SID 0x10 and SID 0x3E are universal. Interviewers test your knowledge of diagnostic session hierarchies, including transitions between Default Session (0x01), Programming Session (0x02), and Extended Diagnostic Session (0x03). Candidates must explain why session transitions automatically reset security access to locked, how the S3 keep-alive watchdog timer functions, and why sub-function 0x80 (Suppress Positive Response) is utilized in TesterPresent requests to conserve CAN bus bandwidth.
The UDS 0x10 0x27 interview combination is among the most frequent evaluation topics for embedded automotive developers. Candidates must describe the complete Seed-Key exchange sequence: requesting an odd sub-function seed (e.g. 0x01), calculating a cryptographic key via proprietary or asymmetric algorithms, and submitting the even sub-function key (0x02). Critical questions examine anti-brute-force defense mechanisms such as the non-volatile false access attempt counter, penalty delay timers, NRC 0x35 (InvalidKey), NRC 0x36 (ExceededNumberOfAttempts), NRC 0x37 (RequiredTimeDelayNotExpired), and why SecurityAccess cannot be called functionally.
Interviewers rigorously examine parameter addressing via 2-byte Data Identifiers (DIDs) under SID 0x22 and SID 0x2E, including AddressAndLengthFormatIdentifier (ALFID) byte formatting for memory reads and writes (SID 0x23 and 0x3D). Candidates must master the 8 bits of the ISO 14229 DTC status mask, the 3-byte DTC format with Failure Type Bytes (FTB per ISO 15031-6), freeze-frame snapshot capture (SID 0x19 0x04), and routine execution lifecycle (SID 0x31) with safety interlock pre-conditions.
Advanced senior engineering interviews focus on the complete 10-step ECU firmware flashing sequence: transitioning to Extended Session (0x10 0x03), disabling DTC recording (0x85 0x02), suppressing normal cyclic traffic (0x28 0x03), entering Programming Session (0x10 0x02), unlocking bootloader security (0x27), executing flash erase (0x31 0x01), initiating RequestDownload (0x34), streaming TransferData (0x36) with block sequence counter handling, terminating via RequestTransferExit (0x37), verifying memory checksums, and issuing an ECUReset (0x11).