DevOps Engineer Interview Questions
372 questions across 38 categories
The bulk of a working DevOps engineer's day-to-day: hands-on tooling, common troubleshooting, and the practical judgment calls that come up once you're actually operating systems.
Should a new AKS cluster use native Kubernetes RBAC or Azure RBAC for Kubernetes Authorization to control kubectl-level access, and what does the Azure option actually change?
IntermediateAzureKubernetesAKS6 min
You're standing up a new AKS cluster and need to choose a network plugin: Azure CNI or kubenet. What's the actual trade-off, and why can this decision be hard to reverse later?
IntermediateAzureKubernetesAKS7 min
A new LoadBalancer-type Service in AKS has been stuck in 'Pending' with no external IP for twenty minutes. How do you actually diagnose this in Azure specifically?
IntermediateAzureKubernetesAKS6 min
During a live incident, how would you distinguish a genuinely slow autoscaler scale-up from one that's actually stuck and won't complete on its own?
IntermediateAzureKubernetesAKS7 min
A just-deployed App Service release is causing production errors and needs an immediate rollback. Is swapping back to the previous slot genuinely faster than redeploying the old package?
IntermediateAzureApp Service6 min
How would you decide between App Service, Azure Functions, and AKS for a new event-driven workload, beyond just 'Functions is for small things'?
IntermediateAzureApp ServiceAzure Functions7 min
An App Service deployment tested perfectly in staging, but broke immediately in production right after a slot swap. What's the most likely cause, and how do you investigate it?
IntermediateAzureApp Service6 min
An Azure Function on the Consumption plan is getting cold-start complaints, and someone suggests 'just move it to Premium.' When does that actually pay for itself, versus just adding cost?
IntermediateAzureAzure Functions6 min
Right after scaling an App Service plan from one instance to several, users started randomly getting logged out and losing cart contents. What changed, and how would you fix it properly?
IntermediateAzureApp Service6 min
A new Key Vault needs a permission model — should you use Azure RBAC or the older vault access policies, and why does Key Vault even have two separate systems for this?
IntermediateAzureKey Vault6 min
An Azure DevOps pipeline currently authenticates to Azure using a service principal with a stored client secret. Why would you migrate to a managed identity instead, and what are the actual limits of doing so?
IntermediateAzure7 min
You need to control outbound traffic from a VNet, including blocking access to specific malicious domains and inspecting traffic content. Are Network Security Groups sufficient, or do you need Azure Firewall?
IntermediateAzure7 min
An app needs to reach an Azure Storage account without traffic crossing the public internet. Should you use a Service Endpoint or a Private Endpoint, and what's the actual security difference?
IntermediateAzure7 min
A user was granted Contributor access to a single resource group, but they can see and modify resources across the entire subscription. How is that possible, and how do you audit for this?
IntermediateAzure6 min
How would you design a resource group and subscription structure for an organization with 15 teams, balancing isolation, cost tracking, and not making every team manage their own subscription?
IntermediateAzure8 min
A CI/CD pipeline that's deployed successfully for two years suddenly fails every run overnight, with no recent pipeline or code changes. How do you diagnose it, and prevent it happening silently again?
IntermediateAzure6 min
A new project is choosing between Blob Storage's Hot, Cool, Cold, and Archive tiers for its data. How would you actually decide, and what's the risk of getting it wrong?
BeginnerAzureBlob Storage6 min
How would you choose a Storage account's replication setting (LRS, ZRS, GRS, or GZRS) for a workload that genuinely needs regional resilience?
IntermediateAzureBlob Storage7 min
An app authenticates to Blob Storage using a long-lived SAS token embedded in configuration. Why move it to Managed Identity, and what does a SAS actually give up that Managed Identity doesn't?
IntermediateAzureBlob Storage7 min
A blob was accidentally overwritten with bad data, not deleted. Both soft delete and versioning are enabled on the account. Why doesn't 'undelete' bring back the good version, and what actually will?
IntermediateAzureBlob Storage6 min