Architecture Interview Questions — All Categories
98 questions across 27 categories
Designing systems under real constraints: requirements, trade-offs, and the reasoning behind a specific design choice.
Should a new AKS cluster use native Kubernetes RBAC or Azure RBAC for Kubernetes Authorization to control kubectl-level access, and what does the Azure option actually change?
IntermediateAzureKubernetesAKS6 min
You're standing up a new AKS cluster and need to choose a network plugin: Azure CNI or kubenet. What's the actual trade-off, and why can this decision be hard to reverse later?
IntermediateAzureKubernetesAKS7 min
How would you let a pod in AKS call a Key Vault or Storage API using its own Azure identity, without mounting any credential file or secret into the pod at all?
AdvancedAzureKubernetesAKS7 min
How would you decide between App Service, Azure Functions, and AKS for a new event-driven workload, beyond just 'Functions is for small things'?
IntermediateAzureApp ServiceAzure Functions7 min
How would you design a zero-downtime, safely-rollback-able release process for an App Service using deployment slots?
AdvancedAzureApp Service8 min
An Azure Function on the Consumption plan is getting cold-start complaints, and someone suggests 'just move it to Premium.' When does that actually pay for itself, versus just adding cost?
IntermediateAzureAzure Functions6 min
How would you design secret rotation for a live, high-traffic application backed by Key Vault, so rotating a credential never causes a production outage?
ExpertAzureKey Vault8 min
How would you design a resource group and subscription structure for an organization with 15 teams, balancing isolation, cost tracking, and not making every team manage their own subscription?
IntermediateAzure8 min
A compliance requirement says certain records must be provably unmodifiable for seven years. How would you design this with Blob Storage's immutability features, and what breaks if you choose the wrong policy type?
AdvancedAzureBlob Storage7 min
How would you choose a Storage account's replication setting (LRS, ZRS, GRS, or GZRS) for a workload that genuinely needs regional resilience?
IntermediateAzureBlob Storage7 min