Scenario Interview Questions — All Categories
92 questions across 28 categories
Open-ended, realistic situations that combine multiple technologies and force genuine engineering judgment.
How would you convince a team to invest time in an idempotency retrofit when the playbook "already works"?
IntermediateAnsible6 min
How would you retrofit idempotency checks into an existing large Ansible playbook full of command/shell tasks, without rewriting every task at once?
AdvancedAnsible8 min
How would you make the case for the cost of a separate AWS account, if leadership pushes back on the added complexity?
IntermediateAWS6 min
You inherit an EC2 workload that authenticates to AWS using an IAM user with AdministratorAccess. How would you migrate it to least-privilege access without causing an outage?
AdvancedAWSIAMEC212 min
How would you prevent a new workload from ever being built directly on a static IAM user again, at an organizational level rather than case by case?
AdvancedAWS8 min
A detective scan finds dozens of pre-existing IAM users with active keys across many accounts. How would you prioritize remediation?
AdvancedAWS7 min
A third-party application only supports static AWS access keys and can't use an instance profile or role. How do you handle this without abandoning least privilege entirely?
AdvancedAWS8 min
Even after mitigating cold starts, a small amount of irreducible tail latency remains. How would you design the caller's retry behavior to handle that remaining tail?
AdvancedAWSLambda8 min
How would you decide whether an S3 public-write exposure is a supply-chain security incident requiring broader notification, versus a contained issue?
AdvancedAWSS37 min
How would your incident response differ if an exposed S3 bucket allowed public write access, not just public read?
AdvancedAWSS38 min
Right after scaling an App Service plan from one instance to several, users started randomly getting logged out and losing cart contents. What changed, and how would you fix it properly?
IntermediateAzureApp Service6 min
A CI/CD pipeline that's deployed successfully for two years suddenly fails every run overnight, with no recent pipeline or code changes. How do you diagnose it, and prevent it happening silently again?
IntermediateAzure6 min
How would you keep a fleet of self-hosted Azure Pipelines agents consistent over time as tool requirements evolve, instead of them slowly drifting apart?
AdvancedAzure Pipelines7 min
Your team still has several Classic (UI-designer-based) release pipelines nobody wants to touch. What's the actual case for migrating them to YAML pipelines, and how would you approach it?
IntermediateAzure Pipelines6 min
A lifecycle policy quietly moved a set of blobs to Archive tier months ago, and now someone urgently needs one back within the hour. What are your actual options?
AdvancedAzureBlob Storage7 min
A script needs cloud CLI credentials (like AWS/Azure/gcloud auth) that are normally provided by an interactive session's environment. How do you handle that for a cron-scheduled script?
IntermediateBashAWS7 min
How does a database schema migration change your deployment strategy for either blue-green or canary — what breaks if you don't account for it?
AdvancedDatabases8 min
In a real system with dozens of services, how would you decide which specific ones actually need multi-region treatment versus which can safely stay single-region?
AdvancedAWS8 min
How would you evaluate whether to move an existing IaaS-hosted application to a PaaS, given the migration cost involved?
IntermediateCloud7 min
How would you explain the security trade-off between containers and VMs to someone deciding whether to run untrusted third-party code?
IntermediateContainers6 min
What would you do differently for a large-table backfill migration if the table were actively receiving high write throughput during the migration window?
ExpertPostgresql8 min
How would you monitor a batched backfill in production to know it's progressing safely, not falling behind, and not causing replication lag?
AdvancedPostgresql7 min
How do you safely add a NOT NULL column to a large production table without locking it for the duration of a slow backfill?
AdvancedPostgresql9 min
How would you tell whether a company's "Platform Engineering" team is genuinely building self-service tooling, versus just being the old ops team under a new name?
IntermediatePlatform Engineering6 min