Azure Interview Questions
34 questions
Azure interview questions covering identity and networking (managed identities, RBAC, Key Vault, private connectivity), compute (App Service, Azure Functions), storage (Blob Storage access, security, and recovery), and AKS — scenario-driven, matching the same depth as this site's AWS and GCP coverage.
A CI/CD pipeline that's authenticated successfully for months suddenly starts failing with an authentication error, right after the security team enabled a new Conditional Access policy. What's happening?
AdvancedAzure7 min
A new Key Vault needs a permission model — should you use Azure RBAC or the older vault access policies, and why does Key Vault even have two separate systems for this?
IntermediateAzureKey Vault6 min
How would you design secret rotation for a live, high-traffic application backed by Key Vault, so rotating a credential never causes a production outage?
ExpertAzureKey Vault8 min
A Function App using Managed Identity to read a Key Vault secret works most of the time, but intermittently fails on startup with an authorization error. How do you actually diagnose this?
AdvancedAzureKey Vault7 min
An Azure DevOps pipeline currently authenticates to Azure using a service principal with a stored client secret. Why would you migrate to a managed identity instead, and what are the actual limits of doing so?
IntermediateAzure7 min
You need to control outbound traffic from a VNet, including blocking access to specific malicious domains and inspecting traffic content. Are Network Security Groups sufficient, or do you need Azure Firewall?
IntermediateAzure7 min
An app needs to reach an Azure Storage account without traffic crossing the public internet. Should you use a Service Endpoint or a Private Endpoint, and what's the actual security difference?
IntermediateAzure7 min
A user was granted Contributor access to a single resource group, but they can see and modify resources across the entire subscription. How is that possible, and how do you audit for this?
IntermediateAzure6 min
How would you design a resource group and subscription structure for an organization with 15 teams, balancing isolation, cost tracking, and not making every team manage their own subscription?
IntermediateAzure8 min
A CI/CD pipeline that's deployed successfully for two years suddenly fails every run overnight, with no recent pipeline or code changes. How do you diagnose it, and prevent it happening silently again?
IntermediateAzure6 min