Cloud Engineer Interview Questions
120 questions across 5 categories
Cloud-provider-specific depth — AWS, Azure, GCP — architecture, cost, and the platform-specific judgment calls each provider demands.
A Pub/Sub-triggered Cloud Function occasionally processes the same message twice — is this a bug, and how do you actually fix it?
IntermediateGCPCloud FunctionsPub/Sub7 min
A Cloud Function has been silently failing for days with no alert firing — what's typically missing in the observability setup, and how do you fix it?
IntermediateGCPCloud Functions6 min
A Cloud Function times out mid-execution after partially completing a multi-step operation — what state does it leave behind, and how do you design around this?
AdvancedGCPCloud Functions7 min
After adding a Serverless VPC Access connector to a Cloud Function, cold starts got noticeably slower — why, and is this avoidable?
AdvancedGCPCloud Functions6 min
How would you decide between Cloud Functions, Cloud Run, and GKE for a new workload, beyond just 'serverless is simpler'?
IntermediateGCPCloud FunctionsCloud Run7 min
A Cloud Function works perfectly with the Functions Framework locally but fails immediately in production — how do you systematically narrow down why?
IntermediateGCPCloud Functions7 min
How would you audit an entire GCP organization to find every principal holding Owner or Editor at the project level, before a security review?
AdvancedGCP7 min
Why is granting a GCP Editor or Owner basic role considered dangerous, and how do predefined and custom roles fix that?
BeginnerGCP6 min
How would you grant a contractor temporary access to a GCP project that automatically expires, without manually revoking it later?
IntermediateGCP6 min
A service account in Project A needs to read from a Cloud Storage bucket in Project B — how does IAM actually handle this cross-project access?
IntermediateGCP6 min
A GCP service account key was accidentally committed to a public repository — walk through your incident response, GCP-specific steps included.
AdvancedGCP8 min
How would you design least-privilege IAM for a Cloud Function that reads from Pub/Sub and writes to a specific Cloud Storage bucket?
IntermediateGCP6 min
A project has correct IAM roles, but you still need to guarantee no VM ever gets a public IP — is that an IAM problem, or something else?
IntermediateGCP6 min
How would you design a CI/CD pipeline's GCP authentication using service account impersonation instead of a downloaded key, and why is that safer?
AdvancedGCP7 min
A GKE workload needs to call a GCP API — should it use Workload Identity or a mounted service account key file, and why?
IntermediateGCPGKE7 min
A browser-based app can list bucket contents but fails to upload directly to Cloud Storage with a CORS error — how do you fix the bucket's CORS configuration?
IntermediateGCPCloud Storage6 min
How would you choose between a dual-region and a multi-region Cloud Storage bucket for a workload needing regional resilience?
IntermediateGCPCloud Storage6 min
How would you design a fast, event-driven alerting system to catch an accidentally-public Cloud Storage bucket within minutes, GCP-native?
ExpertGCPCloud Storage8 min
How would you design Cloud Storage lifecycle rules to automatically reduce cost as objects age, without risking premature deletion of data still in use?
IntermediateGCPCloud Storage7 min
A bucket scan flags a bucket as publicly readable, but Public Access Prevention shows as enabled — how is that possible, and how do you investigate it?
AdvancedGCPCloud Storage7 min
A large file upload to Cloud Storage keeps failing partway through on an unreliable network — what does a resumable upload actually solve here?
BeginnerGCPCloud Storage6 min
A signed URL was accidentally shared publicly — can you revoke it before it expires, and how would you design around this risk?
AdvancedGCPCloud Storage7 min
Why does Google recommend uniform bucket-level access over fine-grained ACLs, and what actually breaks when you enable it on an existing bucket?
IntermediateGCPCloud Storage6 min
Object versioning was enabled for safety, but a lifecycle rule deleting noncurrent versions caused the same data loss versioning was meant to prevent — how?
AdvancedGCPCloud Storage7 min