Conceptual Interview Questions — All Categories
166 questions across 34 categories
The underlying mechanisms and trade-offs interviewers expect you to actually understand, not just recite.
Why does Ansible's --check mode skip most command/shell tasks by default, and what does that imply about how much you can actually trust --check --diff output?
IntermediateAnsible6 min
What's the risk of a task using check_mode: false to force it to always execute, even during a supposed dry run?
IntermediateAnsible6 min
An Ansible playbook reports "changed" on the same tasks every single run, even when nothing about the target host actually changed. Why, and how do you fix it?
IntermediateAnsible8 min
What signals would tell you an Ansible shell task is safe to leave alone versus genuinely needs fixing?
IntermediateAnsible6 min
How do Argo CD's resource hooks compare to Helm's pre-install/pre-upgrade hooks, given Argo CD can also deploy Helm charts directly?
AdvancedArgo CDHelm7 min
What would go wrong if you used content-hash naming for an Argo CD Job that's meant to run on every sync instead?
IntermediateArgo CDKubernetes6 min
What would break if a Helm chart's hooks specifically relied on helm rollback semantics, and how would that manifest when deployed via Argo CD instead?
AdvancedArgo CDHelm7 min
If an Argo CD PreSync hook Job fails, does Argo CD retry it automatically? How would you make that retry behavior explicit instead of relying on defaults?
IntermediateArgo CDKubernetes6 min
What happens to a PreSync hook Job that succeeded on a previous sync, if the overall sync is retried after a later hook fails?
AdvancedArgo CDKubernetes6 min
How does the approach to workload identity and least privilege differ if a workload runs on ECS or Lambda instead of EC2?
IntermediateAWSECSLambda7 min
How does AWS Lambda's execution environment reuse actually work, and why does that make cold starts disproportionately affect low-traffic or bursty functions?
IntermediateAWSLambda7 min
Why does Lambda initialization code placed outside the handler function only run once per environment, and how would you use that intentionally?
IntermediateAWSLambda6 min
What's the cost/latency trade-off of using Provisioned Concurrency versus just increasing a Lambda function's timeout to absorb cold starts?
IntermediateAWSLambda6 min
How does Provisioned Concurrency eliminate Lambda cold starts on demand, and what does that actually cost?
IntermediateAWSLambda6 min
What's the difference between S3 Block Public Access and a restrictive bucket policy, and why is Block Public Access the stronger tool during an active exposure incident?
IntermediateAWSS36 min
What's the difference between S3's 'block public ACLs' and 'restrict public buckets' as individual Block Public Access settings?
IntermediateAWSS36 min
Why might an organization choose not to enable account-level S3 Block Public Access by default, and what legitimate use case would that block?
IntermediateAWSS36 min
How does the Kubernetes cluster autoscaler decide which node pool to scale when multiple pools could satisfy a pending pod?
AdvancedAzureKubernetesAKS7 min
How would Karpenter-style node provisioning change the troubleshooting process compared to the traditional Kubernetes cluster autoscaler?
AdvancedKubernetes7 min
Beyond tool availability, what are the actual trade-offs of self-hosted versus Microsoft-hosted Azure Pipelines agents — cost, control, security, and startup latency?
IntermediateAzure Pipelines7 min
You have near-identical build logic copy-pasted across 15 Azure Pipelines YAML files. How would you use templates to share it, and what are the different template types actually for?
IntermediateAzure Pipelines7 min
A provisioning script failed halfway through, and re-running it from the top caused errors because some resources already existed. How do you make it safely re-runnable?
IntermediateBash6 min
What does 'set -euo pipefail' actually do at the start of a Bash script, and why is it considered close to mandatory for production scripts?
IntermediateBash7 min
What's the actual difference between a login shell and a non-login, non-interactive shell, and why does that distinction determine which startup files get sourced?
BeginnerBash6 min