Senior DevOps Interview Questions
516 questions across 39 categories
Deeper trade-off and design questions — why a specific approach was chosen, what breaks at scale, and how to reason about a system you didn't build.
An App Service deployment tested perfectly in staging, but broke immediately in production right after a slot swap. What's the most likely cause, and how do you investigate it?
IntermediateAzureApp Service6 min
An Azure Function on the Consumption plan is getting cold-start complaints, and someone suggests 'just move it to Premium.' When does that actually pay for itself, versus just adding cost?
IntermediateAzureAzure Functions6 min
Right after scaling an App Service plan from one instance to several, users started randomly getting logged out and losing cart contents. What changed, and how would you fix it properly?
IntermediateAzureApp Service6 min
A CI/CD pipeline that's authenticated successfully for months suddenly starts failing with an authentication error, right after the security team enabled a new Conditional Access policy. What's happening?
AdvancedAzure7 min
A new Key Vault needs a permission model — should you use Azure RBAC or the older vault access policies, and why does Key Vault even have two separate systems for this?
IntermediateAzureKey Vault6 min
A Function App using Managed Identity to read a Key Vault secret works most of the time, but intermittently fails on startup with an authorization error. How do you actually diagnose this?
AdvancedAzureKey Vault7 min
An Azure DevOps pipeline currently authenticates to Azure using a service principal with a stored client secret. Why would you migrate to a managed identity instead, and what are the actual limits of doing so?
IntermediateAzure7 min
You need to control outbound traffic from a VNet, including blocking access to specific malicious domains and inspecting traffic content. Are Network Security Groups sufficient, or do you need Azure Firewall?
IntermediateAzure7 min
An app needs to reach an Azure Storage account without traffic crossing the public internet. Should you use a Service Endpoint or a Private Endpoint, and what's the actual security difference?
IntermediateAzure7 min
A user was granted Contributor access to a single resource group, but they can see and modify resources across the entire subscription. How is that possible, and how do you audit for this?
IntermediateAzure6 min
How would you design a resource group and subscription structure for an organization with 15 teams, balancing isolation, cost tracking, and not making every team manage their own subscription?
IntermediateAzure8 min
A CI/CD pipeline that's deployed successfully for two years suddenly fails every run overnight, with no recent pipeline or code changes. How do you diagnose it, and prevent it happening silently again?
IntermediateAzure6 min
How would you design a pipeline template that fails fast with a clear error when a required tool is missing on the agent, instead of a raw "command not found"?
IntermediateAzure Pipelines6 min
How would you keep a fleet of self-hosted Azure Pipelines agents consistent over time as tool requirements evolve, instead of them slowly drifting apart?
AdvancedAzure Pipelines7 min
An Azure Pipelines YAML job runs fine on Microsoft-hosted agents but fails only on self-hosted agents with 'command not found' for a tool the job needs. Why, and how do you fix it?
IntermediateAzure Pipelines7 min
Beyond tool availability, what are the actual trade-offs of self-hosted versus Microsoft-hosted Azure Pipelines agents — cost, control, security, and startup latency?
IntermediateAzure Pipelines7 min
How would you design a multi-stage Azure Pipelines YAML pipeline so production deployment requires manual approval, while dev and staging deploy automatically?
IntermediateAzure Pipelines6 min
How would you use the Cache task in Azure Pipelines to speed up dependency installation, and what determines whether your cache key is actually effective?
IntermediateAzure Pipelines5 min
Your team still has several Classic (UI-designer-based) release pipelines nobody wants to touch. What's the actual case for migrating them to YAML pipelines, and how would you approach it?
IntermediateAzure Pipelines6 min
A single Azure service connection with subscription-wide Contributor access is used by every pipeline, including ones that only read a storage account. What's wrong here?
AdvancedAzure Pipelines7 min
When would you store a pipeline secret in an Azure Pipelines variable group directly versus linking the variable group to Azure Key Vault?
IntermediateAzure Pipelines6 min
You have near-identical build logic copy-pasted across 15 Azure Pipelines YAML files. How would you use templates to share it, and what are the different template types actually for?
IntermediateAzure Pipelines7 min
A lifecycle policy quietly moved a set of blobs to Archive tier months ago, and now someone urgently needs one back within the hour. What are your actual options?
AdvancedAzureBlob Storage7 min
A storage account's firewall was locked down to specific VNets for security, and now diagnostic logging and a few other first-party Azure integrations silently stopped working. What's actually happening?
AdvancedAzureBlob Storage6 min