The l (lowercase L) and the 1 (one) look really similar. Could that be the cause of some confusion? Of course, the function name helps, but most developers have learned not to trust function names to be an accurate description of what the function does, especially in tricky interview questions.
Still, I'd change this to something like:
def append_five(l=[]):
l.append(5)
return l
It tests the same thing (knowledge of how default parameters work), but without the confounding problem of similar-looking characters. Of course, syntax highlighting would help the applicant out.
All of that being said, I still don't doubt that many developers don't know what they should about default parameters.