>DevOps Interview KB

Comparison Interview Questions — All Categories

127 questions across 34 categories

Head-to-head trade-off questions — the kind that reveal whether a candidate has real judgment or just memorized facts.

When would you use a tmpfs mount instead of a regular volume, and why does it matter for handling sensitive data like decrypted secrets?

IntermediateDocker6 min

What's actually different between Cloud Functions Gen 1 and Gen 2, beyond just a version number?

IntermediateGCPCloud Functions6 min

How would you decide between Cloud Functions, Cloud Run, and GKE for a new workload, beyond just 'serverless is simpler'?

IntermediateGCPCloud FunctionsCloud Run7 min

A project has correct IAM roles, but you still need to guarantee no VM ever gets a public IP — is that an IAM problem, or something else?

IntermediateGCP6 min

How would you choose between a dual-region and a multi-region Cloud Storage bucket for a workload needing regional resilience?

IntermediateGCPCloud Storage6 min

What's the actual difference between git fetch and git pull, and why do some teams recommend always fetching first?

BeginnerGit5 min

Two engineers are working on the same long-lived feature branch. One wants to rebase onto main daily, the other insists on merging main in. Who's right, and how do you decide?

BeginnerGit8 min

What's the actual difference between git merge and git rebase in terms of what happens to the commit graph, not just the end result you see?

BeginnerGit6 min

When would you choose squash-merge over a regular merge commit for landing a pull request into main?

BeginnerGit6 min

A critical bug fix landed on main, and you need to get it onto a release branch that's several weeks behind. Should you cherry-pick the fix, or rebase the release branch onto main?

IntermediateGit6 min

You want to share common CI logic across 20 repositories. When would you use a reusable workflow versus a composite action?

IntermediateGitHub Actions6 min

Your team needs to build an integration that automatically comments on PRs across the organization's repos. Should you use a GitHub App, an OAuth App, or a personal access token?

IntermediateGitHub7 min

Should you publish your container images to GitHub Container Registry (part of GitHub Packages) or a dedicated external registry like ECR or Docker Hub? What actually drives that decision?

IntermediateGitHubDocker6 min

What's the difference between a branch pipeline and a merge request pipeline in GitLab CI, and why does it matter which one actually runs for a given push?

IntermediateGitLab CI/CD7 min

How does GitLab's pipeline trigger distinction compare to GitHub Actions' push vs pull_request trigger?

IntermediateGitLab CI/CDGitHub Actions6 min

How would you structure GitLab protected branch rules differently for a fast-moving startup versus a regulated environment requiring strict change control?

IntermediateGitLab6 min

What's the difference between a "Protected" and a "Masked" GitLab CI/CD variable, and why would you want both on the same variable?

BeginnerGitLab CI/CD5 min

What's the difference between Argo CD's Sync status and Health status, and why does treating them as the same thing cause confusion?

IntermediateArgo CDKubernetes6 min

Should GitOps principles apply to your underlying cluster/infrastructure configuration, or just to application deployments? What's actually different about managing infrastructure this way?

IntermediateGitOpsTerraformKubernetes6 min

For a GitOps setup managing 50 services, would you use one shared config repository or a separate repository per service? What actually drives that decision?

IntermediateGitOpsKubernetes7 min

What's the difference between a helm test resource and a Helm lifecycle hook, and when would you use each?

IntermediateHelm5 min

What's the fundamental difference between Helm's templating approach and Kustomize's overlay/patching approach, and when would you choose each?

IntermediateHelmKustomize6 min

How does the severity of infrastructure drift change for a stateful resource like a database, versus a stateless one like a security group rule?

IntermediateTerraform6 min

What does 'immutable infrastructure' actually mean in practice, and what's the real trade-off against just patching servers in place?

IntermediateInfrastructure as Code6 min