What should you focus on for a Cloud Engineer interview?
System design and architecture appeared more often in these Cloud Engineer interviews than across all interviews in the data. So did AWS, Azure, CI/CD pipelines, monitoring, and cloud security. Start by checking whether you can explain a cloud design, not just name its services.
How deep should my cloud answers go?
Most questions went beyond the basics: 55% were mid-level and 30% were senior-level. Use these questions to check whether you can explain your choices:
- Can you compare Azure and AWS and explain how you would select services?
- Can you say when you would choose AWS Lambda over EC2?
- Can you describe a multi-region AWS design that covers both high availability and security?
- Can you explain the Cloud Adoption Framework principles you use for an Azure landing zone?
Which pipeline and Terraform questions should I work through?
The most asked question was about designing a CI/CD pipeline for containerized applications. It appeared in 4 of 41 interviews. The Terraform state file question appeared in 3 of 41 interviews.
For the pipeline question, can you walk through stages, approvals, deployments, and rollback? Then check whether you can explain how you would find bottlenecks in a slow pipeline and reduce its runtime. Can you also describe how an Azure DevOps pipeline retrieves secrets from Azure Key Vault?
For Terraform, start with what the state file is. Then check whether you can explain how resource imports fit into your workflow and how you would make safe infrastructure changes.
Can I explain how to keep applications and data safe?
These interviews covered networking, security, monitoring, disaster recovery, and migration. Check whether you can describe how you would handle these tasks:
- Explain private connectivity, access policies, and encryption in a cloud design.
- Use health checks and monitoring to troubleshoot an incident.
- Describe your backup and disaster recovery approach.
- Use checksums and data comparisons to verify data integrity during a migration.
Should I also prepare for coding and people questions?
Coding tasks appeared in 3 of 41 interviews. Can you solve Two Sum and explain its time complexity? Can you read a JSON configuration file in Python? These were among the coding tasks in the data.
Behavioral and leadership questions covered learning, customer discussions, stakeholder communication, and project planning, among other topics. Can you explain how you learn a new technology, discuss a customer's needs, or plan a project? Also check whether you can describe the business impact of your work.
What Cloud Engineer interviews cover
The 20 most asked Cloud Engineer questions
Counted by interview, not by mention: a question asked twice in one conversation counts once.
How would you design a CI/CD pipeline for containerized applications, including stages, approvals, deployments, and rollbacks?
Asked in 4 of 41 interviews · last asked Jun 11 · Design · Mid-level
Show answer
I would test the code, build and scan a container image, then publish it to a registry. I would deploy that same image to staging and run integration tests. Production would require approval, followed by a canary rollout with health checks. If checks fail, I would restore the previous image.
- Use immutable image digests so each environment runs the exact same build.
- Require passing checks and an authorized reviewer before production deployment.
- Monitor errors and latency during rollout; stop and roll back if limits are exceeded.
- Keep database changes backward compatible; reverting an image does not undo database changes.
What the interviewer checks: The interviewer checks whether you can automate delivery while controlling production risk and planning recovery.
Other ways it was asked
- “How would you design and implement CI/CD pipelines for automated software delivery?”
- “How do you build CI/CD pipelines for software?”
- “Walk me through a CI/CD pipeline you built end to end, including its stages, approval flow, and rollback process.”
Explain AWS Lambda and when you would choose Lambda over EC2.
Asked in 3 of 41 interviews · last asked Oct 23 · Concept · Mid-level
Show answer
AWS Lambda runs code without requiring me to manage servers. I choose it for short, event-driven tasks with uneven traffic because it scales automatically and charges mainly for requests and execution time. I choose EC2 for long-running work, steady workloads that may cost less, or full control of the operating system.
- Lambda fits tasks such as processing uploaded files, handling queue messages, and serving APIs.
- Each Lambda invocation can run for at most 15 minutes.
- Cold starts can add delay, which matters for latency-sensitive tasks.
- EC2 gives more control but requires managing instances, capacity, and operating system updates.
What the interviewer checks: The interviewer is checking whether you can choose compute based on workload, cost, limits, and management needs.
Other ways it was asked
- “When would you choose AWS Lambda over an EC2 instance for a compute task?”
- “When would you choose Lambda instead of an EC2 instance?”
What is a Terraform state file?
Asked in 3 of 41 interviews · last asked Oct 15 · Concept · Junior
Show answer
A Terraform state file records the resources Terraform manages and links them to real infrastructure. Terraform uses it with your configuration and current resource data to plan changes. A backend controls where state is stored, either locally or remotely. Shared remote state helps teams work safely when access controls and state locking are configured.
- State maps Terraform resource addresses to real resource IDs and stores resource details.
- Terraform normally refreshes resource data during planning to detect changes made outside Terraform.
- State can contain secrets, so restrict access and do not commit it to version control.
- Locking prevents conflicting writes, but support and setup depend on the backend.
What the interviewer checks: The interviewer is checking whether you understand how state tracks resources and why teams must store it safely.
Other ways it was asked
- “What is the state file in Terraform?”
- “What is the Terraform state file, and why is it important?”
- “How does Terraform use a state backend or state file during its workflow?”
How would you compare Azure and AWS?
Asked in 2 of 41 interviews · last asked Jun 15 · Concept · Mid-level
Show answer
Azure and AWS both provide cloud computing, storage, networking, and managed databases. Azure connects closely with Microsoft identity and business tools. AWS offers a broad service range and a large partner network. I would choose based on workload needs, team skills, regional availability, and total cost.
- Comparable services include Azure Virtual Machines and Amazon EC2, or Azure Blob Storage and Amazon S3.
- Both support Windows and Linux; Azure is not only for Microsoft workloads.
- Identity, permissions, networking, and management tools work differently, so moving between them takes effort.
- Neither is always cheaper; compare usage, discounts, licensing, support, and data transfer costs.
What the interviewer checks: The interviewer wants to see whether you can compare practical trade-offs and choose a cloud for business needs.
Other ways it was asked
- “What is the difference between AWS and Azure?”
How do you manage secrets in Azure DevOps pipelines, including retrieving them from Azure Key Vault?
Asked in 2 of 41 interviews · last asked Sep 10 · Tooling · Mid-level
Show answer
I keep secrets in Azure Key Vault or Azure DevOps secret variables, never in source code. I retrieve Key Vault secrets through a linked variable group or the AzureKeyVault@2 task. I use an Azure service connection with workload identity federation and limited vault access. I pass secrets only to tasks that need them and never print them.
- Grant the pipeline identity Key Vault Secrets User under Azure RBAC, or Get/List secret permissions under access policies.
- Map secret variables explicitly to environment variables for scripts; avoid passing secrets as command-line arguments.
- Allow the pipeline agent to reach Key Vault through its firewall or private network.
- Limit pipeline access to secret variable groups; log masking does not prevent every secret leak.
What the interviewer checks: The interviewer checks whether you can retrieve secrets securely while controlling identity, permissions, network access, and accidental exposure.
Other ways it was asked
- “How do you manage secrets in Azure DevOps?”
- “Have you used Key Vault? How would you pull secrets, passwords, and tokens in a live pipeline?”
How would you identify bottlenecks in a slow CI/CD pipeline and reduce its runtime?
Asked in 2 of 41 interviews · last asked Sep 10 · Scenario · Senior
Show answer
I would measure queue time and each stage’s runtime to find what delays the pipeline most. I would then target those delays with dependency caching, parallel tests, reused build artifacts, or more runner capacity. I would compare typical and slow-run times across similar commits before and after changes, while keeping required tests and security checks.
- Separate runner queue time from build, test, and deployment time.
- Optimize the longest dependent path; parallel jobs help only when they can run independently.
- Use valid cache keys and build once, then promote the same artifact between environments.
- Compare similar workloads over multiple runs, and check failure rates as well as runtime.
What the interviewer checks: The interviewer is checking whether you use measurements to improve pipeline speed without weakening reliability or safety.
Other ways it was asked
- “How would you identify bottlenecks in a slow CI/CD pipeline and reduce its deployment time?”
- “How would you measure whether changes to a CI/CD pipeline reduced deployment time?”
- “How would you improve a CI/CD pipeline that takes a long time to run across many commits?”
How would you verify data integrity during a cloud migration using checksums and data comparisons?
Asked in 2 of 41 interviews · last asked May 21 · Scenario · Senior
Show answer
I would compare source and destination checksums using a consistent snapshot or paused writes. For files, I would calculate SHA-256 hashes on both sides. For database tables, I would compare row counts and values by primary key, normalizing formats before hashing. I would investigate mismatches, retry failed transfers, and validate any later changes before switching over.
- Compare the same data version; ongoing writes can cause false mismatches.
- Matching counts alone do not prove integrity; sampling can miss errors.
- Normalize timestamps, nulls, and field ordering when comparing database records.
- Do not assume object ETags are content checksums; multipart uploads and encryption can affect their meaning.
What the interviewer checks: The interviewer checks whether you can detect missing or changed data and handle live writes before switching systems.
Other ways it was asked
- “How would you ensure data integrity during a large migration from one cloud provider to another?”
- “How can you validate data integrity during a cloud migration using checksums or comparisons of the actual data?”
- “How would you migrate a large dataset from on-premises systems to the cloud while ensuring data integrity end to end?”
How would you design a multi-region AWS architecture to provide high availability and security for an application?
Asked in 2 of 41 interviews · last asked Sep 30 · Design · Senior
Show answer
I would use two AWS Regions, with load balancers and application servers across multiple Availability Zones in each. Route 53 health checks would direct traffic to a healthy region. I would replicate data across regions and plan database failover. Security would include private application subnets, least-privilege IAM, encryption, and AWS WAF.
- Choose active-passive or active-active based on cost, acceptable downtime, and acceptable data loss.
- Asynchronous replication can lose recent writes during failover; database promotion depends on the chosen service.
- DNS failover is not instant because clients can cache DNS records.
- Test regional failover regularly, including database promotion, application dependencies, and backup recovery.
What the interviewer checks: The interviewer checks whether you can handle regional failures while balancing security, data safety, recovery time, and cost.
Other ways it was asked
- “How would you design a simple cross-region application architecture on AWS?”
What is the difference between RPO and RTO?
Asked in 2 of 41 interviews · last asked Oct 23 · Concept · Mid-level
Show answer
RPO (Recovery Point Objective) is the maximum acceptable data loss, measured in time. RTO (Recovery Time Objective) is the maximum acceptable time to restore a service after a disruption. RPO guides backup or replication frequency, while RTO guides how quickly recovery must happen.
- RPO answers: how much recent data can we afford to lose?
- RTO answers: how long can the service be unavailable?
- Lower targets usually require more costly recovery systems.
CodeRPO: 15 minutes. RTO: 1 hour. If the service fails at noon, recover data through at least 11:45 a.m. Restore the service by 1 p.m.What the interviewer checks: The interviewer is checking whether you can separate acceptable data loss from acceptable downtime.
Other ways it was asked
- “What are RTO and RPO? Give an example.”
What are the main disaster recovery strategies for AWS workloads?
Asked in 2 of 41 interviews · last asked Oct 23 · Concept · Mid-level
Show answer
AWS has four main disaster recovery strategies: backup and restore, pilot light, warm standby, and multi-site active-active. I choose based on recovery time (RTO), acceptable data loss (RPO), and cost. Faster recovery usually costs more. I test recovery regularly and keep cross-Region backups when regional outages are a risk.
- Backup and restore rebuilds from saved data and configuration; it usually costs least but takes longest.
- Pilot light keeps core components running, such as replicated databases; other components start during recovery.
- Warm standby keeps a smaller, working environment ready; recovery requires scaling it up and redirecting traffic.
- Multi-site active-active serves traffic from multiple Regions; it costs more and needs careful data replication.
What the interviewer checks: The interviewer checks whether you can balance recovery targets, cost, and complexity, and verify recovery through testing.
Other ways it was asked
- “What backup strategy would you use for AWS workloads?”
What are the core Cloud Adoption Framework (CAF) principles you follow when deploying an Azure landing zone?
Asked once · last asked Feb 9 · Concept · Senior
Show answer
I align the landing zone with business needs and let teams own subscriptions within central guardrails. I use policy-based governance and one management plane for Azure and hybrid resources. I design around application needs without forcing one compute service. I automate deployment and build in identity, networking, security, and monitoring.
- Give teams subscription ownership while enforcing shared rules through management groups and Azure Policy.
- Use Microsoft Entra ID and role-based access control to grant only needed permissions.
- Choose services based on workload needs, not a fixed preference for virtual machines or containers.
- Use infrastructure as code, with clear ownership for networking, monitoring, security, and costs.
What the interviewer checks: The interviewer is checking whether you can balance team freedom with consistent governance and a secure, repeatable foundation.
How do you monitor cloud costs using Azure Cost Management tools or custom tooling?
Asked once · last asked Apr 16 · Tooling · Mid-level
Show answer
I use Azure Cost Management to track spending by subscription, resource group, service, and tag. I set budgets and alerts, review cost trends, and investigate unexpected increases. For custom reports, I use cost exports or APIs to feed dashboards and assign costs to teams. I also check Azure Advisor for savings recommendations.
- Budgets send alerts; they do not automatically stop spending.
- Cost data has a delay, so it is not a real-time spending limit.
- Consistent tags help assign costs, but some charges need separate allocation.
- Use built-in tools first; add custom tooling for reporting or allocation needs they cannot meet.
What the interviewer checks: The interviewer wants to see how you track costs, catch overspending, and choose suitable tools.
Other ways it was asked
- “How do you monitor cloud costs? Do you use Azure Cost Management tools or build your own tooling?”
What cloud architecture best practices would you consider when setting up API integration for a client?
Asked once · last asked Apr 24 · Scenario · Senior
Show answer
I would design the API integration for security, reliability, and the client's expected traffic. I would use encrypted connections, strong authentication, and limited access permissions. I would add timeouts, safe retries, rate limits, and monitoring. I would also plan for API changes, scaling, and cost.
- Use an API gateway when central access controls, routing, and rate limits are needed.
- Retry temporary failures with backoff; use idempotency keys to prevent duplicate actions when supported.
- Keep secrets in a secret manager, and avoid logging sensitive data.
- Define clear API contracts, version changes, and monitor errors and response times.
What the interviewer checks: The interviewer is checking whether you can balance security, reliability, performance, and cost around the client's needs.
How would you structure more than 50 production workloads across AWS accounts, VPCs, and environments?
Asked once · last asked Jun 11 · Design · Senior
Show answer
I would use AWS Organizations to separate production from development and testing, then group accounts by team and workload risk. High-risk workloads would get dedicated accounts. Security, central logs, and shared services would have separate accounts. I would use regional VPCs, private subnets for application resources, and only approved connections between environments.
- Account boundaries limit failure impact and access; VPCs provide network isolation, not full account isolation.
- Use dedicated workload accounts where needed; group smaller workloads only when ownership, risk, and lifecycle match.
- Apply organization policies through organizational units and SCPs; SCPs limit permissions but do not grant access.
- Automate account setup with Control Tower and infrastructure as code; plan non-overlapping IP ranges and service quotas.
What the interviewer checks: The interviewer checks whether you can balance isolation, security, and manageable operations across many workloads.
Can you tell me what's the difference between AWS and GCP, especially how resources are organized?
Asked once · last asked Sep 4 · Concept · Mid-level
Show answer
AWS and GCP offer similar cloud services, but organize resources differently. AWS puts resources in accounts, which can be grouped into organizational units within AWS Organizations. GCP puts resources in projects, which can sit under folders and an organization. AWS supports consolidated billing across accounts; GCP projects link to billing accounts.
- AWS accounts provide strong isolation for workloads, permissions, and costs.
- GCP folders are optional, and projects can exist without an organization.
- GCP IAM permissions inherit from the organization through folders and projects to resources.
- AWS service control policies limit account permissions; they do not grant access.
What the interviewer checks: The interviewer wants to know whether you understand each cloud's resource hierarchy, access boundaries, and billing structure.
What are some ways to reduce costs in a cloud environment?
Asked once · last asked Sep 4 · Scenario · Mid-level
Show answer
I reduce cloud costs by removing unused resources, choosing smaller resources where possible, and scaling capacity with demand. I also use cheaper storage tiers and reduce data transfer costs. For steady workloads, I consider commitment discounts; for jobs that can handle interruptions, I use spot instances. I track spending and check that savings do not hurt performance or reliability.
- Use billing reports, resource tags, and budgets to find costs and track changes.
- Stop idle resources and schedule non-production systems to run only when needed.
- Use commitment discounts for predictable usage; spot instances can be interrupted.
- Review storage access costs and data transfer fees before moving data.
What the interviewer checks: The interviewer is checking whether you can reduce waste without hurting performance, reliability, or business needs.
How would you integrate Oracle Exadata on OCI with AWS to create a multi-cloud environment?
Asked once · last asked Sep 10 · Design · Senior
Show answer
I would keep Exadata in OCI and connect AWS applications using private IPs. I would link OCI FastConnect and AWS Direct Connect through a network provider, or use an IPsec VPN. I would configure routing, DNS, access controls, and database TLS, then test latency and connection failover.
- Use non-overlapping network ranges and route traffic through OCI and AWS network gateways.
- Use redundant connections and test what happens when one connection fails.
- Private connections are not automatically encrypted; use TLS for database traffic.
- Limit cross-cloud database calls to reduce latency and data transfer costs.
What the interviewer checks: The interviewer checks whether you can connect both clouds securely while managing availability, latency, and cost.
How do you manage AWS infrastructure in a multi-tenant environment?
Asked once · last asked Oct 11 · Scenario · Mid-level
Show answer
I choose separate AWS accounts or shared resources based on each tenant’s security, cost, and scale needs. I use IAM permissions, network controls, and application checks to protect tenant data. I automate infrastructure with Terraform or CloudFormation and track usage, costs, and performance by tenant.
- Separate accounts give stronger isolation but add management work; shared resources need careful access controls.
- Enforce tenant access in the application and data layer, not just the network.
- Use tenant-level limits to stop one tenant from slowing down others.
- Automate tenant setup and removal, including access changes and data retention.
What the interviewer checks: The interviewer is checking whether you can balance tenant isolation, reliable service, cost, and day-to-day management.
A customer has many lifted-and-shifted EC2 instances running for a year with no cost optimization. What should they do next?
Asked once · last asked Oct 15 · Scenario · Mid-level
Show answer
They should review costs and usage, then remove waste before buying discounts. Use AWS Cost Explorer, CloudWatch, and Compute Optimizer to find idle or oversized instances, then stop or resize them after checking application needs. Schedule non-production shutdowns, clean up unused storage, and use Savings Plans or Reserved Instances for the remaining steady usage.
- Check usage over time, including peak periods, before resizing.
- Remove unused EBS volumes and snapshots only after checking data retention needs.
- Buy commitments after rightsizing; they reduce flexibility and require predictable usage.
- Use Spot Instances for workloads that can handle interruptions.
What the interviewer checks: The interviewer is checking whether you reduce waste safely before committing to discounted capacity.
Which AWS-native tools can provide rightsizing recommendations?
Asked once · last asked Oct 15 · Concept · Junior
Show answer
AWS Compute Optimizer and AWS Cost Explorer provide rightsizing recommendations. Compute Optimizer covers several resource types, while Cost Explorer focuses on EC2. AWS Trusted Advisor flags underused resources, and AWS Cost Optimization Hub brings optimization recommendations together across accounts and Regions.
- Compute Optimizer uses utilization metrics to recommend suitable resource sizes and configurations.
- Cost Explorer identifies EC2 opportunities to reduce instance sizes or stop idle instances.
- Cost Optimization Hub consolidates recommendations; Trusted Advisor provides broader checks, including cost optimization.
- Check peak demand and performance needs before applying recommendations.
What the interviewer checks: The interviewer checks whether you know the main AWS tools and understand their different roles in rightsizing.
Cloud fundamentals and architecture interview questions
Questions cover cloud concepts, provider and service choices, account setup, multi-tenant designs, landing zones, and cost control. 18 questions.
What is cloud computing?
Asked once · last asked Mar 7 · Concept · Junior
Show answer
Cloud computing is the use of computing services over a network, usually the internet. These services include servers, storage, and databases. I can get resources when needed and scale them up or down without buying physical hardware. Pricing is often based on usage.
- Resources are available on demand and can scale with workload needs.
- The provider manages physical infrastructure; customer responsibilities depend on the service type.
- Common service models are IaaS, PaaS, and SaaS.
- Usage-based pricing offers flexibility, but costs need monitoring.
What the interviewer checks: The interviewer is checking whether you understand what cloud computing provides and how it differs from owning hardware.
What is Azure Arc?
Asked once · last asked Feb 9 · Concept · Junior
Show answer
Azure Arc extends Azure management to resources outside Azure, such as servers and Kubernetes clusters in local data centers or other clouds. It lets me use Azure tools for inventory, access control, policies, and monitoring. The resources stay where they are; Arc does not move them into Azure.
- Connected resources appear in Azure Resource Manager and the Azure portal.
- Servers and Kubernetes clusters use agents to connect to Azure.
- Arc integrates with Azure Policy, Azure Monitor, and Microsoft Defender for Cloud; some features cost extra.
What the interviewer checks: The interviewer is checking whether you understand how Azure manages resources across local data centers and multiple clouds.
Can you give an example of a cloud service?
Asked once · last asked Mar 7 · Concept · Junior
How would you describe an Azure tenant's high-level architecture, including its traffic flows and entry points?
Asked once · last asked Sep 22 · Design · Senior
How would you choose an AWS service for a particular requirement, and what factors would guide your selection?
Asked once · last asked Sep 30 · Scenario · Mid-level
Can you explain what multi-tenant SaaS architecture is?
Asked once · last asked Oct 15 · Concept · Mid-level
How would you explain the architecture of an application?
Asked once · last asked Oct 23 · Design · Mid-level
Other ways it was asked
- “Can you explain the architecture around any application that you worked on?”
Cloud networking and security interview questions
Networking and security topics include DNS, load balancing, private connections, identity, secrets, encryption, access rules, and compliance. 41 questions.
How do system-assigned and user-assigned managed identities differ in Azure, and when would you choose each?
Asked once · last asked Apr 24 · Scenario · Mid-level
Other ways it was asked
- “How would you choose between a system-assigned and a user-assigned managed identity in Azure?”
- “What is an example of a use case for a system-assigned or user-assigned managed identity in Azure?”
- “What are system-assigned and user-assigned managed identities?”
What is the difference between Azure Traffic Manager and a load balancer?
Asked once · last asked Feb 9 · Concept · Mid-level
What are Layer 7 load balancers, and how do you use them?
Asked once · last asked Mar 9 · Concept · Mid-level
How would you implement Layer 7 load balancing in Azure?
Asked once · last asked Mar 9 · Scenario · Mid-level
What are the key concepts involved in DNS, and how do they affect name resolution?
Asked once · last asked Mar 9 · Concept · Mid-level
How would you protect invoice data in a processing pipeline at rest and in transit using encryption methods, key management, Azure Key Vault, TLS, and storage-level encryption?
Asked once · last asked Mar 9 · Scenario · Senior
Can you explain what a managed identity is in Azure?
Asked once · last asked Apr 24 · Concept · Mid-level
For a RAG application or another generic use case, where would a user-assigned managed identity be more relevant? Can you give me an example?
Asked once · last asked Apr 24 · Scenario · Senior
How would you configure an Amazon S3 bucket and its access policies?
Asked once · last asked May 21 · Tooling · Mid-level
How would you control access to data and manage data flows between users and cloud storage?
Asked once · last asked May 21 · Scenario · Senior
How would you dynamically create roles and policies that expire after two days?
Asked once · last asked May 21 · Scenario · Senior
How would you secure Amazon API Gateway against unauthorized requests?
Asked once · last asked May 21 · Scenario · Senior
Show 7 more
How can an external vendor securely deliver data to a private subnet?
Asked once · last asked May 21 · Scenario · Senior
Other ways it was asked
- “How can an external vendor reach a private subnet, and when would a public-facing endpoint be needed?”
Could you walk me through these VPC networking elements: public and private subnets, route tables, NAT gateways, internet gateways, and security groups?
Asked once · last asked Jun 11 · Concept · Mid-level
If an EC2 instance in a private subnet has an issue connecting to an RDS database, how would you troubleshoot it?
Asked once · last asked Jun 11 · Scenario · Mid-level
How would you secure a public-facing application using CloudFront and AWS WAF?
Asked once · last asked Jun 11 · Tooling · Senior
Describe a complex Route 53 scenario and how you would resolve it.
Asked once · last asked Jun 11 · Scenario · Senior
What are AWS security groups, and how do they control network access to EC2 instances?
Asked once · last asked Jun 15 · Concept · Junior
How would you set up and manage a VPN network in AWS?
Asked once · last asked Jun 15 · Tooling · Mid-level
Cloud compute, Docker and Kubernetes interview questions
Compute questions cover virtual machines, server maintenance, managed application platforms, Docker, Kubernetes, serverless functions, scaling, and application deployment. 34 questions.
Which AWS services would you consider when designing a batch-processing system?
Asked once · last asked Mar 9 · Design · Mid-level
Other ways it was asked
- “How would you design an AWS architecture for batch processing, and what principles would guide your design?”
- “What factors do you consider when designing an AWS batch-processing environment?”
What are the benefits and weaknesses of Kubernetes?
Asked once · last asked May 7 · Concept · Mid-level
Other ways it was asked
- “Based on your experience, what are the benefits and weaknesses of Kubernetes?”
- “What are the benefits and drawbacks of Kubernetes?”
In Amazon EKS, are node groups managed separately from the cluster, or does the cluster manage them?
Asked once · last asked Aug 5 · Concept · Mid-level
What is the function of VMware vMotion?
Asked once · last asked Oct 8 · Concept · Junior
How would you troubleshoot a pod that is in CrashLoopBackOff?
Asked once · last asked Sep 10 · Scenario · Mid-level
How would you divide an application into microservices?
Asked once · last asked Mar 9 · Design · Senior
How would you design and implement an end-to-end Google Cloud solution using a GKE cluster, and what components would it include?
Asked once · last asked Apr 24 · Design · Senior
How would you explain an end-to-end Cloud Run pipeline, including its source, job, runtime environment, output, and AI component?
Asked once · last asked Apr 30 · Design · Senior
What types of applications are commonly run on Kubernetes, such as internal applications, databases, or web applications?
Asked once · last asked May 7 · Concept · Mid-level
How would you approach a maintenance task such as upgrading PHP on a legacy client server?
Asked once · last asked May 12 · Scenario · Mid-level
How would you build a serverless environment using Azure Functions and other cloud infrastructure?
Asked once · last asked May 15 · Tooling · Mid-level
When would you use a serverless function rather than package a script in a container and run it there?
Asked once · last asked May 15 · Concept · Mid-level
Other ways it was asked
- “When would you use a function rather than package a script in a container and run it there?”
Show 7 more
How do you handle cold starts in Lambda, and what strategies can you use to mitigate them?
Asked once · last asked May 21 · Concept · Senior
How would you design a solution using AWS Lambda, S3, EC2, EventBridge, and API Gateway to automatically resize user-uploaded images into thumbnails?
Asked once · last asked May 21 · Design · Senior
What types of EC2 instances and operating systems are available, and how do you secure EC2 instances using security groups?
Asked once · last asked Jun 15 · Concept · Mid-level
How would you deploy an application across multiple EC2 instances and scale the deployment, and what determines how many instances can be updated at once?
Asked once · last asked Jun 15 · Scenario · Mid-level
How would you use Docker and Kubernetes to deploy an application across multiple servers?
Asked once · last asked Jun 15 · Tooling · Mid-level
What is the difference between a Docker image and a container, and between Docker and Kubernetes?
Asked once · last asked Jun 15 · Concept · Junior
What is the difference between Azure App Service and Amazon EC2?
Asked once · last asked Jun 15 · Concept · Mid-level
Terraform and infrastructure as code interview questions
Terraform and infrastructure as code questions cover tool choices, providers, workflows, state, imports, project structure, and safe changes. 15 questions.
What is infrastructure as code, and when would you use it to manage cloud infrastructure?
Asked once · last asked Apr 16 · Concept · Mid-level
How do you structure Terraform projects to keep them maintainable over time?
Asked once · last asked Apr 14 · Tooling · Mid-level
What kinds of infrastructure resources can you create using Terraform providers?
Asked once · last asked Apr 14 · Tooling · Mid-level
What does the Terraform workflow look like, and what are the different steps?
Asked once · last asked Apr 14 · Concept · Junior
If a Terraform state file is lost but the resources still exist, what happens when you run `terraform plan` or `terraform apply`?
Asked once · last asked Apr 14 · Scenario · Senior
How would you version-control and deploy AWS Lambda code using infrastructure as code, and would you use Terraform?
Asked once · last asked Aug 5 · Tooling · Mid-level
Other ways it was asked
- “How would you version-control and deploy AWS Lambda function code using infrastructure as code, and which tool would you use?”
- “Is Terraform an appropriate tool for managing and deploying AWS Lambda function code with infrastructure as code?”
- “Where should AWS Lambda function source code be stored and managed when deploying it with infrastructure as code?”
Can you draw and explain an architecture diagram for deploying an AWS Lambda function using infrastructure as code?
Asked once · last asked Aug 5 · Design · Mid-level
How would you implement backups for Azure SQL and Cosmos DB using Terraform?
Asked once · last asked Sep 3 · Tooling · Senior
How does Terraform compare with Azure-native tools like ARM and Bicep, and why would you choose it?
Asked once · last asked Sep 10 · Concept · Senior
Other ways it was asked
- “Why would a company use Terraform even when Azure-native tools like ARM or Bicep are available?”
- “What are the differences between Terraform and Bicep, and why would you choose Terraform over Bicep?”
In an environment where some Azure resources were created manually in the portal, how would you onboard them to Terraform?
Asked once · last asked Sep 10 · Scenario · Senior
We use Terraform to provision our cloud infrastructure and need to make sure developers don't accidentally deploy public S3 buckets. How would you approach Terraform security?
Asked once · last asked Oct 12 · Scenario · Senior
How do you manage infrastructure changes with Terraform or the AWS console, and what factors determine which approach you use?
Asked once · last asked Oct 15 · Tooling · Mid-level
Show 2 more
What would you do if the Terraform state file was lost or became corrupt?
Asked once · last asked Oct 15 · Scenario · Mid-level
What is Terraform, and what is it used for?
Asked once · last asked Sep 30 · Concept · Junior
Other ways it was asked
- “What is Terraform, and why do you use it?”
CI/CD and cloud automation interview questions
Pipeline and automation questions cover builds, approvals, deployments, rollback, security checks, code reviews, Python, programming basics, and API development. 49 questions.
Write a function that solves the Two Sum problem. What is the time complexity of your solution?
Asked once · last asked Oct 12 · Write code · Junior
Other ways it was asked
- “Write a function that solves the Two Sum problem.”
- “What is the time complexity of a solution to the Two Sum problem?”
When would you choose multiple processes instead of multiple threads?
Asked once · last asked Oct 12 · Scenario · Mid-level
What are the common HTTP methods used in APIs?
Asked once · last asked Apr 24 · Concept · Junior
Other ways it was asked
- “What are the standard HTTP methods used in a REST API?”
What do you check during code reviews to verify correctness, readability, functionality, and test coverage?
Asked once · last asked Apr 14 · Concept · Mid-level
Other ways it was asked
- “What do you look for in code reviews?”
- “When reviewing a pull request, how do you verify the code’s functionality, correctness, readability, and test coverage?”
How can you manage multi-stage deployments with Azure DevOps?
Asked once · last asked Feb 9 · Tooling · Mid-level
Other ways it was asked
- “How do you maintain multi-stage deployment pipelines in Azure DevOps?”
How do you design APIs, and what methods or tools do you use?
Asked once · last asked Mar 9 · Tooling · Mid-level
How would you prevent Terraform apply from running without the required approval gates?
Asked once · last asked Sep 10 · Scenario · Senior
When would you use Python alongside Terraform for AWS automation rather than using Terraform alone?
Asked once · last asked Sep 30 · Concept · Mid-level
How do you integrate Terraform code into Azure DevOps?
Asked once · last asked Feb 9 · Tooling · Mid-level
If an EC2 instance is launched by auto scaling when CPU usage exceeds 70%, how can the new instance get the latest code?
Asked once · last asked Feb 18 · Scenario · Mid-level
When would you create custom Gradle build logic rather than use existing build tasks or plugins?
Asked once · last asked Mar 9 · Tooling · Mid-level
How would you automate deployment to EC2 in a CI/CD pipeline instead of transferring files manually?
Asked once · last asked Mar 9 · Tooling · Mid-level
Show 6 more
How can CloudWatch trigger processing on an EC2 instance?
Asked once · last asked Mar 9 · Tooling · Mid-level
What is OpenAPI, and how is it used to describe APIs?
Asked once · last asked Mar 9 · Concept · Junior
How do you contribute to building and maintaining CI/CD pipelines, and how do you work with a separate DevOps team when one maintains them?
Asked once · last asked Apr 14 · Tooling · Mid-level
What CI/CD pipeline actions can you automate beyond builds triggered by pull requests or merges?
Asked once · last asked Apr 14 · Tooling · Mid-level
How do you integrate Checkmarx into a project?
Asked once · last asked Apr 14 · Tooling · Mid-level
How can you add SonarQube to a project or codebase?
Asked once · last asked Apr 14 · Tooling · Mid-level
Cloud storage, databases and migration interview questions
Storage and migration topics include uploads, messaging, database design and tuning, financial data correctness, data pipelines, and change data capture. 40 questions.
How would you change an Azure Storage account to use geo-redundant storage?
Asked once · last asked Sep 3 · Scenario · Mid-level
Other ways it was asked
- “What steps, including backups, would you take before changing an Azure Storage account to geo-redundant storage?”
How do agent-based and agentless Azure Migrate approaches differ, and how would you choose and deploy one?
Asked once · last asked Feb 9 · Scenario · Senior
Other ways it was asked
- “For migrating physical servers and Hyper-V or VMware virtual machines to Azure, would you use agent-based or agentless migration, and how would you deploy the chosen approach?”
- “What is the difference between agent-based and agentless migration in Azure Migrate?”
How would you let users upload files directly to Amazon S3 in an image-processing workflow?
Asked once · last asked May 21 · Design · Mid-level
Other ways it was asked
- “After users upload files to Amazon S3, what steps should an event-driven image-processing workflow take next?”
- “How would you configure an Amazon S3 bucket for an image-processing workflow?”
For a customer exiting a data center with physical servers and virtual servers on Hyper-V and VMware, what types of Azure Migrate appliances would you deploy?
Asked once · last asked Feb 9 · Scenario · Senior
If you were investigating a performance issue with a specific query, where would you start?
Asked once · last asked Mar 9 · Scenario · Mid-level
How do you design a schema in MongoDB?
Asked once · last asked Mar 9 · Concept · Mid-level
How would you design a schema and choose an Azure data store—Azure SQL, Cosmos DB, or Azure Data Lake—for high-volume invoice processing and real-time fraud detection, ensuring encryption at rest, row-level security, and scalable reads and writes?
Asked once · last asked Mar 9 · Design · Senior
Other ways it was asked
- “How would you design a database schema and choose an Azure data store, such as Azure SQL, Cosmos DB, or Azure Data Lake, for high-volume invoice processing and real-time fraud detection while ensuring encryption at rest, row-level security, and scalable read and write performance?”
How would you design indexing, partitioning, and scaling strategies—such as elastic pools, read replicas, or sharding—to ensure low-latency queries and high throughput for a massive influx of invoice records while maintaining relational integrity?
Asked once · last asked Mar 9 · Design · Senior
How can a Cloudflare Workers application call other services to store data?
Asked once · last asked Apr 14 · Tooling · Mid-level
How should a data pipeline handle a schema mismatch: continue processing with the existing schema, or stop and report an error?
Asked once · last asked Apr 14 · Scenario · Mid-level
How would you lead an on-premises-to-Google Cloud migration and modernization program?
Asked once · last asked Apr 24 · Scenario · Senior
How would you design a CDC pipeline using medallion architecture for nightly data from different transactional databases, including processing and best practices at the bronze, silver, and gold layers?
Asked once · last asked Apr 24 · Design · Senior
Other ways it was asked
- “How would you design a CDC data pipeline using medallion architecture for nightly data from different transactional databases, and what would you do at each layer—from the raw bronze layer through silver to gold? What best practices would you follow?”
Show 7 more
When implementing CDC across multiple source systems, what should you keep in mind, including how to handle changes to previously loaded data?
Asked once · last asked Apr 24 · Scenario · Senior
How would you handle CDC for batch data when a new extract from a transactional database arrives each night?
Asked once · last asked Apr 24 · Scenario · Mid-level
How do you write an Apache Airflow DAG?
Asked once · last asked Apr 24 · Tooling · Mid-level
How long is data stored in Pub/Sub? What is its retention period?
Asked once · last asked Apr 30 · Concept · Mid-level
Why would the APIs read data from Pub/Sub instead of a database?
Asked once · last asked Apr 30 · Concept · Senior
In an architecture using Pub/Sub and APIs, how can a topic trigger an API, and what might the API do with the message?
Asked once · last asked Apr 30 · Scenario · Mid-level
How do you provision and configure databases, write SQL queries, and identify opportunities to optimize performance, such as adding indexes?
Asked once · last asked May 12 · Tooling · Mid-level
Cloud monitoring and disaster recovery interview questions
Reliability questions cover monitoring, health checks, troubleshooting, incident response, automated fixes, high availability, backups, and disaster recovery. 41 questions.
How would you set up observability and automated remediation in Azure Monitor or Log Analytics to detect anomalies such as latency spikes or unauthorized access attempts and trigger self-healing actions for the pipeline? Consider alerts, dashboards, and runbooks.
Asked once · last asked Mar 9 · Tooling · Senior
Other ways it was asked
- “How would you design alerting thresholds, escalation policies, and automated runbooks in Azure Monitor and Log Analytics so that real-time anomalies, such as latency spikes or unauthorized access, trigger self-healing actions while routing only pertinent alerts to the right on-call engineers?”
What steps would you take to debug an issue with an AWS Lambda function?
Asked once · last asked May 21 · Scenario · Mid-level
Other ways it was asked
- “How would you monitor and troubleshoot an AWS Lambda function?”
How would you troubleshoot a "not enough resources" error when starting existing cloud virtual machines?
Asked once · last asked Sep 4 · Scenario · Mid-level
Other ways it was asked
- “How do you troubleshoot a "not enough resources" error when trying to start multiple powered-off virtual machines?”
- “How would you troubleshoot resource constraints preventing 10 powered-off virtual machines from starting?”
- “What could be the reason for a "not enough resources" error when trying to start GCE instances that were already created?”
If customers reported that they had completed orders but weren’t receiving the ticket email they should have received, how would you investigate the issue, and where would you start?
Asked once · last asked Mar 9 · Scenario · Mid-level
What would you normally include in health checks or health-check endpoints?
Asked once · last asked Mar 9 · Concept · Mid-level
How would you safely automate remediation for a 90% CPU alert in Azure using scaling, restarts, or throttling, while preventing flapping and ensuring idempotent runbooks through debounce logic and circuit breakers, and which metrics would verify success?
Asked once · last asked Mar 9 · Scenario · Senior
Other ways it was asked
- “How would you implement automated remediation for a critical CPU 90% alert in Azure, such as scaling out resources, restarting services, or throttling traffic, while avoiding flapping alerts and ensuring runbook actions are idempotent and safe? Consider debounce logic, circuit-breaker patterns, and the metrics you would monitor to verify success.”
How do you measure observability and monitor data flowing through a system?
Asked once · last asked Apr 14 · Scenario · Senior
What design and planning strategies would you use to make a system highly available and suitable for 24/7 operation?
Asked once · last asked Apr 14 · Design · Senior
When diagnosing a performance issue, what would you investigate first, and where would you look for relevant signals?
Asked once · last asked Apr 14 · Scenario · Senior
How can proactive metrics tracking improve mean time to recovery?
Asked once · last asked Apr 14 · Concept · Senior
How do business metrics differ from system health metrics, logs, errors, and warnings when monitoring a system?
Asked once · last asked Apr 14 · Concept · Mid-level
How would you prioritize incidents and escalate when a customer-facing production outage coincides with internal issues?
Asked once · last asked May 21 · Scenario · Senior
Other ways it was asked
- “If the pipeline is down while there’s also a production issue, how do you prioritize and handle those incidents?”
- “If customers are affected by a production outage while internal issues also need attention, when would you escalate, and how would you manage the situation?”
Show 5 more
How should an image-processing system handle Lambda invocation failures, network issues, and exhausted retries so failed images can be recovered and processed?
Asked once · last asked May 21 · Scenario · Senior
If your dashboard shows the success rate dropping from 95–99% to 80%, errors climbing, latency rising from three seconds to 45 seconds, and timeout exceptions in the logs, what would you do to resolve the issue?
Asked once · last asked May 21 · Scenario · Senior
How would you diagnose an issue isolated to one region when application versions differ across regions?
Asked once · last asked May 21 · Scenario · Senior
Other ways it was asked
- “How would you investigate an issue occurring in only one region of a multi-region application?”
- “How would you identify the root cause of an issue when different application versions are deployed across three regions?”
What backup methods are available for Azure SQL and Cosmos DB, and how would you perform a backup?
Asked once · last asked Sep 3 · Tooling · Senior
How would you troubleshoot performance issues affecting only some users, including on GCP without Grafana?
Asked once · last asked Sep 4 · Scenario · Senior
Other ways it was asked
- “How would you troubleshoot a performance issue that is only affecting a small subset of users in a large-scale environment?”
- “How do you troubleshoot an issue affecting only a small set of users on GCP when Grafana is not available?”
Cloud AI and RAG interview questions
AI questions explore service choices, RAG architecture, agentic applications, model capacity, governance, and coding assistants. 11 questions.
What are the main components of a RAG system?
Asked once · last asked Apr 24 · Concept · Mid-level
Other ways it was asked
- “What are the components of a RAG system?”
How do you use GitHub Copilot, and what benefits do you get from your preferred way of interacting with it?
Asked once · last asked Apr 14 · Tooling · Mid-level
How do you provide repository context and style guidance to AI coding assistants using prompts or prompt files?
Asked once · last asked Apr 14 · Tooling · Mid-level
Other ways it was asked
- “How do you use prompt files to provide context or instructions to an AI coding assistant?”
- “What context or style guidance do you give an AI coding assistant, such as repository code samples, and do you use ad hoc prompts?”
Can you explain what plugins are in Semantic Kernel?
Asked once · last asked Apr 24 · Concept · Mid-level
If a customer needs a RAG system for about 1,000–2,000 users, with 100 concurrent users, how would you determine the LLM's tokens-per-minute configuration?
Asked once · last asked Apr 24 · Scenario · Senior
What factors do you consider when evaluating AI solutions, including agentic AI, AI governance, cloud workloads, and API integrations?
Asked once · last asked May 5 · Concept · Senior
What is Azure AI Foundry, and what can it be used for?
Asked once · last asked May 27 · Concept · Mid-level
How would you build cloud infrastructure for an agentic AI application?
Asked once · last asked Oct 1 · Design · Senior
What do you mean by “traditional AI”?
Asked once · last asked Apr 21 · Concept · Junior
How might you limit the context supplied to an LLM in a RAG application based on its use case?
Asked once · last asked Apr 24 · Scenario · Mid-level
Can you explain context drift normalization?
Asked once · last asked Apr 24 · Concept · Senior
Cloud engineer behavioral and leadership interview questions
People and leadership topics include learning, customer discussions, business impact, stakeholder communication, project planning, team management, and technology strategy. 20 questions.
Tell me about a time you researched alternatives and recommended a different technology from the one initially selected.
Asked once · last asked Mar 9 · Behavioral · Senior
How would you explain the business impact of a complex architectural trade-off to a director or VP of engineering?
Asked once · last asked Apr 14 · Scenario · Senior
How would you work with customers, sales, presales and solutions teams, and delivery teams, and what challenges would you anticipate with each?
Asked once · last asked Apr 21 · Behavioral · Mid-level
Tell me about a customer conversation where you expanded the scope beyond the customer's initial request. How did you identify the opportunity and broaden the discussion?
Asked once · last asked Apr 21 · Behavioral · Mid-level
How do you quantify the commercial impact of expanding a customer's project scope, including incremental revenue and order-size growth?
Asked once · last asked Apr 21 · Behavioral · Mid-level
Can you share an example of a large-scale transformation or modernization initiative that you led end to end, and what was the outcome?
Asked once · last asked May 18 · Behavioral · Senior
Can you describe a time when you had to resolve competing priorities between product needs and engineering constraints, and explain how you aligned the teams?
Asked once · last asked May 18 · Behavioral · Senior
How would you develop technology strategies and roadmaps, and how would your approach to DevOps differ as an individual contributor versus a manager?
Asked once · last asked Sep 25 · Behavioral
Other ways it was asked
- “How have you developed technology strategies and roadmaps, and how has your DevOps work differed as an individual contributor versus a manager?”
How would you manage teams with different skill sets and responsibilities, use metrics to support growth, and balance workloads when capacity is uneven?
Asked once · last asked Sep 25 · Scenario
How would you introduce strategies or initiatives in a team or business unit while working with application teams, stakeholders, and other managers?
Asked once · last asked Sep 25 · Behavioral
Other ways it was asked
- “What strategies or initiatives have you introduced in your team or business unit while working with application teams, stakeholders, and other managers?”
How would you respond if you were assigned work involving a technology you had not used before?
Asked once · last asked May 27 · Scenario
How would you apply your ability to learn new technologies quickly in a project?
Asked once · last asked May 27 · Scenario
Show 8 more
How do you track and manage project progress?
Asked once · last asked Jun 14 · Scenario · Mid-level
How do you estimate work with stakeholders, and how do you assess the accuracy of your estimates?
Asked once · last asked Mar 19 · Scenario · Mid-level
How would you build your knowledge and skills with Amazon Connect if you had not used it before?
Asked once · last asked Apr 14 · Scenario
Other ways it was asked
- “Since you have not used Amazon Connect before, how would you plan to build your knowledge and skills with it?”
If senior management rejects your recommendation despite your supporting arguments, how would you respond?
Asked once · last asked Apr 16 · Scenario · Mid-level
What steps do you take in your first 30 days in a new role or team to get up to speed and hit the ground running?
Asked once · last asked May 5 · Scenario
How would you resolve a conflict between teams?
Asked once · last asked May 7 · Scenario
How do you prevent misunderstandings among project stakeholders?
Asked once · last asked Jun 14 · Scenario · Mid-level
If your organization made a strategic change involving tools, site management, or cloud providers, how would you influence the decision?
Asked once · last asked Sep 25 · Scenario
Related interview questions
- System Design interview questions
- AWS interview questions
- CI/CD interview questions
- Azure interview questions
- DevOps Engineer interview questions
- Network Engineer interview questions
- System Administrator interview questions
- IT Support and Help Desk interview questions
- Cybersecurity interview questions
How this list is made
Every question here was asked by a real interviewer in a real job interview that a candidate ran MeetAssist in. After the call, the interviewer's questions are pulled from the transcript. Practice sessions, tests, exams and anything that was not a job interview are dropped.
Questions are rewritten so they make sense on their own: names of people, employers and clients are removed, and speech-to-text mistakes are fixed. Small talk, logistics and questions about one candidate's own résumé are left out. Rephrasings of the same question are merged, and the count is the number of different interviews it came up in.
The interviews come from candidates who use MeetAssist, so they lean towards software, data and AI roles: the shares describe these interviews, not every Cloud Engineer interview. Answers to the most asked questions are written and checked by an editor; a "common mistake" is shown only when reviews of real answers in these interviews show it, with the count.
41 interviews, 20 candidates, Feb 2026 to Oct 2026. Updated every month with new interviews.
Or add the Chrome extension