You are using an Azure Virtual Network and need to connect it to an on-premises network. What are the options available to achieve this, and what do you consider first?
What a strong answer covers
Evaluates a Site-to-Site VPN or Azure ExpressRoute for connectivity; assesses bandwidth and latency requirements; checks for required hardware on-premises; considers security implications of the chosen method.
The follow-up you would get
If you choose a Site-to-Site VPN, what steps do you take to ensure high availability?
Could you have answered that?
technicalStorage2 of 6
You have an Azure Blob Storage account that is unexpectedly returning 403 Forbidden errors when accessed from a web application. How do you investigate the issue?
What a strong answer covers
Checks the storage account's access policies and shared access signatures; verifies CORS settings for the web application; inspects network security rules; examines the identity used for access and permissions granted.
The follow-up you would get
What could you do if the errors persist after verifying permissions?
Could you have answered that?
scenarioIAM3 of 6
A developer reports that they cannot access an AWS resource they need for their project, even though they have the correct permissions according to the IAM policy. How do you investigate this issue in the first fifteen minutes?
What a strong answer covers
Validates the IAM policy attached to the user; checks if any explicit deny rules exist; examines service control policies if using AWS Organizations; looks at resource-specific policies; confirms the user’s group membership.
The follow-up you would get
You discover a conflicting policy that denies access. How do you suggest addressing this while still maintaining security?
Could you have answered that?
ownershipA decision that cost4 of 6
Describe a time when you chose a specific cloud service that didn't meet your needs. How did you realise it?
What a strong answer covers
Identifies the specific cloud service and its intended purpose; mentions performance metrics or limitations that highlighted the shortfall; explains the evaluation process used to assess alternatives; details the adjustments made and their impact; avoids blaming external factors.
The follow-up you would get
What could you have done differently during the selection process?
Could you have answered that?
technicalServerless5 of 6
You have a serverless application running on AWS Lambda that sometimes experiences timeouts. What strategies do you employ to troubleshoot and resolve this issue?
What a strong answer covers
Enables detailed logging in CloudWatch to gather execution logs; checks the Lambda function's timeout settings; reviews the function's memory allocation and execution duration; analyses the payload size and external service calls, if any.
The follow-up you would get
If the timeouts are due to external API calls, what could you do to improve reliability?
Could you have answered that?
technicalNetworking6 of 6
You have a Virtual Private Cloud (VPC) in AWS with a public subnet and a private subnet. Instances in the private subnet cannot reach the internet. What steps do you take to enable outbound internet access for these instances?
What a strong answer covers
Checks if a NAT Gateway or NAT Instance is present in the public subnet; verifies that route tables are correctly configured; ensures security group and network ACL allow outbound traffic; confirms that instances have the correct IAM roles if using a NAT Gateway.
The follow-up you would get
What might happen if the NAT Gateway runs out of elastic IPs?
Could you have answered that?
That is this set.
Load six more — you will get questions you have not seen first.