Cloud Engineer Interview Questions
120 questions across 5 categories
Cloud-provider-specific depth — AWS, Azure, GCP — architecture, cost, and the platform-specific judgment calls each provider demands.
A user was granted Contributor access to a single resource group, but they can see and modify resources across the entire subscription. How is that possible, and how do you audit for this?
IntermediateAzure6 min
How would you design a resource group and subscription structure for an organization with 15 teams, balancing isolation, cost tracking, and not making every team manage their own subscription?
IntermediateAzure8 min
A CI/CD pipeline that's deployed successfully for two years suddenly fails every run overnight, with no recent pipeline or code changes. How do you diagnose it, and prevent it happening silently again?
IntermediateAzure6 min
A lifecycle policy quietly moved a set of blobs to Archive tier months ago, and now someone urgently needs one back within the hour. What are your actual options?
AdvancedAzureBlob Storage7 min
A new project is choosing between Blob Storage's Hot, Cool, Cold, and Archive tiers for its data. How would you actually decide, and what's the risk of getting it wrong?
BeginnerAzureBlob Storage6 min
A storage account's firewall was locked down to specific VNets for security, and now diagnostic logging and a few other first-party Azure integrations silently stopped working. What's actually happening?
AdvancedAzureBlob Storage6 min
A compliance requirement says certain records must be provably unmodifiable for seven years. How would you design this with Blob Storage's immutability features, and what breaks if you choose the wrong policy type?
AdvancedAzureBlob Storage7 min
How would you choose a Storage account's replication setting (LRS, ZRS, GRS, or GZRS) for a workload that genuinely needs regional resilience?
IntermediateAzureBlob Storage7 min
An app authenticates to Blob Storage using a long-lived SAS token embedded in configuration. Why move it to Managed Identity, and what does a SAS actually give up that Managed Identity doesn't?
IntermediateAzureBlob Storage7 min
A blob was accidentally overwritten with bad data, not deleted. Both soft delete and versioning are enabled on the account. Why doesn't 'undelete' bring back the good version, and what actually will?
IntermediateAzureBlob Storage6 min