Advanced DevOps Interview Questions
194 questions
A team wants zero-downtime deploys with fast rollback for a high-traffic payments API. Would you recommend blue-green or canary deployment, and why?
AdvancedCI/CDKubernetes10 min
How would you design the metrics and thresholds that gate automatic canary promotion versus automatic rollback?
AdvancedKubernetes8 min
How does a database schema migration change your deployment strategy for either blue-green or canary — what breaks if you don't account for it?
AdvancedDatabases8 min
Your architecture serves a large volume of data out to end users and other services, and data transfer/egress costs have become one of your largest line items. What architectural decisions actually reduce this?
AdvancedAWS8 min
Leadership wants to adopt a multi-cloud strategy specifically to reduce vendor lock-in and negotiate better pricing. What are the real cost trade-offs they might not be accounting for?
AdvancedAWSAzureGCP7 min
In a real system with dozens of services, how would you decide which specific ones actually need multi-region treatment versus which can safely stay single-region?
AdvancedAWS8 min
What's the actual difference between designing for high availability across Availability Zones versus across Regions, and when do you actually need multi-region instead of just multi-AZ?
AdvancedAWS8 min
What actually changed between cgroups v1 and v2, and why did some container resource limit behavior change when a host migrated to a v2-only kernel/distro?
AdvancedContainersLinux7 min
A container keeps getting killed, and both the container's own memory limit and the host's overall available memory look potentially responsible. How do you determine which one actually caused it?
AdvancedContainersLinux7 min
Your containerized application's process count keeps growing over time, even though nothing appears to be leaking connections or memory. What's likely happening, and why is it specific to running in a container?
AdvancedContainersLinux7 min
How would you monitor a batched backfill in production to know it's progressing safely, not falling behind, and not causing replication lag?
AdvancedPostgresql7 min
How would the safe-migration approach for adding a NOT NULL column to a large table differ on MySQL versus PostgreSQL, given their different online-DDL capabilities?
AdvancedMysqlPostgresql8 min
How do you safely add a NOT NULL column to a large production table without locking it for the duration of a slow backfill?
AdvancedPostgresql9 min
A user updates their profile, immediately reloads the page, and sees their old data — but only sometimes. What's causing this, and how do you fix it?
AdvancedDatabases8 min
How would you design the actual mechanism that decides whether a given database query goes to the primary or a read replica, for an application that wasn't originally built with this split in mind?
AdvancedDatabases8 min
What's the actual trade-off between synchronous and asynchronous database replication, and how would you decide which to use for a payments system versus an analytics dashboard?
AdvancedDatabases7 min
How would you design artifact signing into your CI/CD pipeline so a deployed container image or binary can be verified as genuinely coming from your build, not tampered with in transit?
AdvancedDevSecOps7 min
What does 'build provenance' actually mean in a supply-chain security context, and how would you start implementing it (e.g. via SLSA) for an existing CI pipeline?
AdvancedDevSecOps8 min
Your build just pulled in a package from the public npm registry instead of your internal package with the same name, and it wasn't the version your team published. What's happening, and how do you respond?
AdvancedDevSecOps8 min
A customer's procurement team now requires an SBOM for every release. How would you design SBOM generation into your build pipeline so it's actually useful, not just a compliance checkbox?
AdvancedDevSecOps8 min
A widely-used third-party GitHub Action your pipelines depend on was compromised via a stolen maintainer token. What's your actual exposure?
AdvancedDevSecOpsGitHub Actions8 min
How would you further reduce a Docker image's size if the runtime still needs native binary dependencies, beyond what a multi-stage build alone achieves?
AdvancedDocker7 min
A container fails to write to a bind-mounted directory with permission denied, even though the host directory has permissive permissions — why?
AdvancedDocker7 min
How would you design volume mounts for a containerized production database, considering both data persistence and backup requirements?
AdvancedDocker7 min