Azure Interview Questions
34 questions
Azure interview questions covering identity and networking (managed identities, RBAC, Key Vault, private connectivity), compute (App Service, Azure Functions), storage (Blob Storage access, security, and recovery), and AKS — scenario-driven, matching the same depth as this site's AWS and GCP coverage.
How does the Kubernetes cluster autoscaler decide which node pool to scale when multiple pools could satisfy a pending pod?
AdvancedAzureKubernetesAKS7 min
Your AKS cluster is under CPU pressure and pods are stuck Pending, but the cluster autoscaler isn't adding nodes. How would you troubleshoot it?
AdvancedAzureKubernetesAKS10 min
How would Karpenter-style node provisioning change the troubleshooting process compared to the traditional Kubernetes cluster autoscaler?
AdvancedKubernetes7 min
A team converted their AKS cluster to a private cluster for security reasons. The next day, several engineers and a CI/CD pipeline can no longer run kubectl commands at all. How do you diagnose this?
AdvancedAzureKubernetesAKS7 min
How would you let a pod in AKS call a Key Vault or Storage API using its own Azure identity, without mounting any credential file or secret into the pod at all?
AdvancedAzureKubernetesAKS7 min
An App Service using Managed Identity to call a storage account worked fine for months. After a Private Endpoint was added to that storage account, the App Service started failing to reach it. Why?
AdvancedAzureApp ServiceBlob Storage7 min
A Consumption-plan Azure Function triggered by new Blob Storage uploads is intermittently missing events during bursty upload periods — why, and how do you fix it?
AdvancedAzureAzure FunctionsBlob Storage7 min
How would you design a zero-downtime, safely-rollback-able release process for an App Service using deployment slots?
AdvancedAzureApp Service8 min
A CI/CD pipeline that's authenticated successfully for months suddenly starts failing with an authentication error, right after the security team enabled a new Conditional Access policy. What's happening?
AdvancedAzure7 min
A Function App using Managed Identity to read a Key Vault secret works most of the time, but intermittently fails on startup with an authorization error. How do you actually diagnose this?
AdvancedAzureKey Vault7 min
A lifecycle policy quietly moved a set of blobs to Archive tier months ago, and now someone urgently needs one back within the hour. What are your actual options?
AdvancedAzureBlob Storage7 min
A storage account's firewall was locked down to specific VNets for security, and now diagnostic logging and a few other first-party Azure integrations silently stopped working. What's actually happening?
AdvancedAzureBlob Storage6 min
A compliance requirement says certain records must be provably unmodifiable for seven years. How would you design this with Blob Storage's immutability features, and what breaks if you choose the wrong policy type?
AdvancedAzureBlob Storage7 min