Top 30 Cloud Interview Questions and Answers
30 multiple-choice questions on Cloud, drawn from 30 bites out of the 189 tagged Cloud on Tezvyn. Answer them here or read straight down. Every question carries the correct option, why it is correct, and a link to the bite it came from.
30 questions. Pick an answer, or open “Show the answer” to read it.
Answers are graded in your browser. Nothing is saved, and no XP or streak is earned here. The app keeps score.
Question 1 of 30
A company provisions virtual servers in the cloud and manages the operating system, middleware, and application code themselves. Which service model is this?
Show the answer
Answer: c · Infrastructure as a Service
This is IaaS: the vendor manages the physical infrastructure and hypervisor, while the customer manages everything from the OS upward. Platform as a Service is a tempting distractor because candidates often mistakenly label managed virtual machines as PaaS, but true PaaS abstracts away the OS and runtime management entirely.
Read the full bite: Explain the difference between IaaS, PaaS, and SaaS with examples
Question 2 of 30
When moving from IaaS to SaaS, which responsibility shifts to the cloud provider?
Show the answer
Answer: c · Patching the guest operating system
In IaaS the customer manages the guest OS, but in SaaS the provider assumes that duty. Many beginners incorrectly think the provider also secures their data in SaaS, yet data classification and protection always remain the customer's responsibility.
Read the full bite: How does shared responsibility shift between IaaS and SaaS?
Question 3 of 30
Which statement best describes a core benefit of adopting public cloud for a new business?
Show the answer
Answer: c · It enables rapid resource scaling and avoids large upfront capital investments.
Option C is correct because the card emphasizes public cloud's ability to turn rigid capital expense into flexible operational expense, allowing rapid scaling without large upfront hardware purchases. Option D is incorrect as the card notes that public cloud may not be cost-effective for stable, high-utilization workloads and uncontrolled usage can lead to higher costs.
Read the full bite: Public Cloud: Renting, Not Owning, Your Datacenter
Question 4 of 30
What is the key feature that distinguishes a private cloud from a traditional, on-premises data center?
Show the answer
Answer: d · It offers on-demand, self-service access to resources through a management software layer.
A private cloud's defining characteristic is the cloud management software stack that provides self-service, on-demand access and automation, differentiating it from a traditional data center which may also own its hardware and use virtualization but lacks these cloud-like capabilities. While option B is often true for private clouds, it's also true for traditional data centers, so it's not the distinguishing factor.
Read the full bite: Private Cloud: Cloud Computing on Your Terms
Question 5 of 30
A development team prioritizes rapid deployment of their custom web application and wants to avoid managing servers or operating systems. Which cloud service model best fits their needs?
Show the answer
Answer: b · Platform as a Service (PaaS), as it abstracts away infrastructure, allowing focus on code and quick deployment.
PaaS is designed for rapid development and deployment by abstracting away the underlying infrastructure like servers and operating systems, allowing developers to focus solely on their application code. While IaaS offers control, it requires managing those underlying components, which the team wants to avoid.
Read the full bite: Platform as a Service (PaaS): Focus on Code, Not Infrastructure
Question 6 of 30
What is the primary problem Infrastructure as Code (IaC) aims to solve in managing IT infrastructure?
Show the answer
Answer: a · Preventing configuration drift and ensuring consistent, repeatable environments.
The card explicitly states IaC was created to combat 'configuration drift' and ensure 'consistent, repeatable environments.' While IaC can contribute to cost efficiency, its main purpose is not cost reduction, and it does not eliminate all human involvement, but rather automates the provisioning process through code, not GUIs.
Read the full bite: Infrastructure as Code: Manage Servers with Code, Not Clicks
Question 7 of 30
Which scenario best illustrates the primary financial advantage of adopting a cloud-based OpEx model compared to traditional CapEx?
Show the answer
Answer: c · A startup needing to quickly deploy a new service with fluctuating user demand without significant upfront hardware purchases.
Option C is correct because the OpEx model allows startups to avoid large upfront hardware purchases and enables rapid scaling for fluctuating demand, directly aligning with the financial advantages described. Option D is a tempting distractor, but the card explicitly states that pure OpEx can be more expensive for predictable, stable workloads over the long term, meaning it doesn't always guarantee overall cost reduction.
Read the full bite: CapEx vs. OpEx: The Cloud's Financial Shift
Question 8 of 30
Which cloud strategy combination best addresses predictable monthly user growth and unpredictable, short-duration traffic spikes?
Show the answer
Answer: b · Implement scalability for the monthly growth and elasticity for the celebrity-induced spikes.
Scalability is ideal for planned, long-term growth, while elasticity efficiently handles unpredictable, short-term demand fluctuations by automatically adjusting resources. Relying only on elasticity for steady growth is inefficient, as it would constantly make small adjustments instead of operating from a stable baseline.
Read the full bite: Cloud Scalability vs. Elasticity: Planned Growth vs. Real-Time Reaction
Question 9 of 30
Which principle is central to High Availability's ability to maintain continuous service during component failures?
Show the answer
Answer: a · Implementing redundant components with automatic failover mechanisms to handle detected outages.
The core of High Availability involves having redundant components and automatically rerouting traffic to a healthy standby when a primary component fails. Distractor B is incorrect because HA specifically emphasizes automatic failover, not manual intervention.
Read the full bite: High Availability: Designing Systems That Don't Go Down
Question 10 of 30
The cloud's Region/Availability Zone (AZ) model is primarily designed to address which of the following challenges?
Show the answer
Answer: b · The inherent risk of a single data center becoming a critical point of failure.
The card states that "A single data center is a massive single point of failure" and the Region/AZ model was created to allow applications to "survive the loss of an entire data center or more." This directly addresses the risk of single data center failures. While other options are general cloud benefits, they are not the primary design goal of the Region/AZ model's failure isolation.
Read the full bite: Cloud Regions and AZs: Infrastructure Built for Failure
Question 11 of 30
Under the Shared Responsibility Model, which security task is always the customer's responsibility, regardless of the cloud service model (IaaS, PaaS, or SaaS)?
Show the answer
Answer: b · Managing user access and data within the service
The card explicitly states that customers always retain responsibility for their data, accounts, and access management, which includes managing user access and data within the service. Patching the guest operating system (option A) is only the customer's responsibility in IaaS, with the provider handling it in PaaS and SaaS.
Question 12 of 30
Which strategic objective is the most compelling reason for an organization to adopt a multi-cloud strategy, despite its inherent operational complexities?
Show the answer
Answer: a · To gain negotiating power with providers and enhance resilience against outages or service deprecation.
The card states multi-cloud's purpose is to 'mitigate these risks by distributing workloads... providing leverage and resilience,' and lists 'avoid vendor lock-in' and 'increase resilience' as key reasons. While cost savings can be a factor, the card warns that 'the added engineering complexity might erase any gains from better pricing,' making it less compelling than resilience and vendor lock-in avoidance.
Read the full bite: Multi-cloud: Spreading Bets Across Cloud Providers
Question 13 of 30
Which application characteristic would make a FaaS solution generally less cost-effective or suitable compared to traditional server-based hosting?
Show the answer
Answer: b · The application is a long-running, stateful service with consistent, high throughput.
The card explicitly states to "Avoid FaaS for long-running, stateful applications or tasks with constant, high-throughput workloads" because the pay-per-invocation model can become more expensive than a dedicated server for sustained traffic. The other options describe scenarios where FaaS is highly suitable due to its event-driven nature and automatic scaling capabilities.
Question 14 of 30
What is a key characteristic that distinguishes a Virtual Machine (VM) from simply running multiple applications on a single operating system?
Show the answer
Answer: d · VMs enable the execution of entirely separate operating systems on a single physical machine.
The core purpose of a VM is to run multiple isolated operating systems on a single physical machine, each with its own OS. Option B is incorrect because VMs do not share the host's OS kernel; that is a characteristic of containers.
Read the full bite: Virtual Machine (VM): A Computer Inside a Computer
Question 15 of 30
What is the primary benefit of using a machine image for deploying servers?
Show the answer
Answer: a · It enables rapid and consistent provisioning of identical virtual machines.
The card emphasizes that machine images solve "slow, error-prone, and inconsistent server provisioning" by acting as a "cookie cutter" to launch "hundreds of identical virtual machines" quickly. Option D is incorrect because images are for identical servers; unique configurations often require additional tools. Option C is incorrect as the card states images can be overkill for simple applications, where Docker might be preferred.
Read the full bite: Machine Images: The Blueprint for Your Servers
Question 16 of 30
Which scenario best illustrates the primary advantage of using cloud instances?
Show the answer
Answer: b · A website experiencing significant, unpredictable spikes in user traffic throughout the day.
Cloud instances are designed for elasticity, allowing users to scale computing resources up or down rapidly to meet fluctuating demand and pay only for the time they are active. A website with unpredictable traffic spikes directly benefits from this on-demand scalability, unlike scenarios with consistent loads or static needs.
Read the full bite: Cloud Instances: Renting Servers on Demand
Question 17 of 30
When an application scales by adding new servers, how does a cloud load balancer ensure these new servers are utilized?
Show the answer
Answer: b · It detects the new servers via health checks and includes them in its traffic distribution.
The card states that the load balancer "automatically detects these new instances, passes its health checks, and begins routing a share of the incoming HTTP requests to them." This ensures new servers are utilized. Option C is incorrect because the load balancer manages the backend server pool internally, not by updating DNS for individual backend servers.
Read the full bite: Cloud Load Balancer: Your App's Traffic Cop
Question 18 of 30
Which of the following best describes the primary function of an Auto Scaling Group (ASG)?
Show the answer
Answer: d · To dynamically adjust the number of instances based on demand and automatically replace failed instances.
The card explicitly states ASGs automate both 'elasticity (matching capacity to demand)' and 'fault tolerance (recovering from instance failures),' which aligns with dynamically adjusting instance count and replacing failed instances. Option C describes the function of a load balancer, which works in conjunction with an ASG but is not the ASG's primary role.
Read the full bite: Auto Scaling Groups: Elasticity and Self-Healing
Question 19 of 30
When would an AWS customer most likely choose a Convertible Reserved Instance over a Standard Reserved Instance?
Show the answer
Answer: b · If they foresee potential changes in their instance family or operating system requirements.
Convertible RIs offer flexibility to change instance families or operating systems later, making them suitable when future requirements are uncertain. Standard RIs, while offering the highest discount, lack this flexibility, making option A incorrect.
Read the full bite: AWS Reserved Instances: Commit to Compute, Save Big
Question 20 of 30
Which task is an ideal use case for a user data script?
Show the answer
Answer: a · Automating the initial installation of a web server and application code on a new instance.
User data scripts are designed for "Day One" instance configuration, such as installing software and pulling application code on first boot. They are not suitable for ongoing updates, creating AMIs with baked-in configurations, or complex multi-service orchestration.
Read the full bite: User Data Scripts: Day-One Instance Configuration
Question 21 of 30
When is a bare metal instance the most appropriate choice over a virtual machine?
Show the answer
Answer: b · To host a high-frequency trading platform requiring consistent, ultra-low latency and direct hardware access.
Bare metal instances are ideal for performance-critical workloads like high-frequency trading that require consistent low latency and direct hardware access, bypassing virtualization overhead. Virtual machines, on the other hand, are better suited for rapid auto-scaling to handle unpredictable traffic spikes, which bare metal instances lack.
Read the full bite: Bare Metal Instances: Your Own Dedicated Cloud Server
Question 22 of 30
Why is object storage generally not recommended for applications requiring frequent, small updates to data, such as a transactional database?
Show the answer
Answer: d · Objects are immutable, meaning even a small modification necessitates replacing the entire object.
The card explicitly states that objects are immutable, making object storage unsuitable for frequent updates because changing even one byte requires re-uploading the entire object. While other options might seem plausible, the immutability is the direct and primary reason given in the card.
Read the full bite: Object Storage: Data Without a File Hierarchy
Question 23 of 30
A service exposes a custom binary protocol over TCP that needs maximum throughput and source IP preservation. Which load balancer fits best and why?
Show the answer
Answer: d · Layer 4, because it routes on IP and port without reading payload, adding minimal overhead
L4 routes purely on IP and port, so it handles arbitrary protocols at high throughput with low overhead. L7 must terminate and parse HTTP, which it cannot do for a custom binary protocol.
Question 24 of 30
Before a cloud server's operating system can store files on a newly provisioned block storage volume, what essential step must be performed?
Show the answer
Answer: a · It must be formatted with a filesystem and then mounted to a directory.
The card states that block storage is like a raw, unformatted SSD, and it's 'up to you to format it with a filesystem... and mount it' before use. Option B is incorrect because block storage is designed for single-server attachment, not for simultaneous access by multiple servers.
Read the full bite: Block Storage: Your Virtual Hard Drive in the Cloud
Question 25 of 30
For which scenario is cloud file storage the most suitable solution?
Show the answer
Answer: c · Enabling multiple servers or users to access a shared, hierarchical file system.
Cloud file storage is designed for scenarios requiring a shared, traditional file system accessible by multiple clients or servers, as stated in the card. Storing vast unstructured data is better suited for object storage, and high-performance databases typically use block storage.
Read the full bite: Cloud File Storage: A Shared Drive on the Internet
Question 26 of 30
Why might a freshly changed DNS record not take effect immediately for all users worldwide?
Show the answer
Answer: b · Cached answers persist in resolvers until the previous record's TTL expires
Resolvers cache records for the TTL set before the change, so old answers linger until that timer expires. Root servers do not approve individual records, and browsers do cache DNS.
Question 27 of 30
A company expects to grow from two VPCs to forty, all needing to reach shared services. Which approach avoids an unmanageable connectivity mesh?
Show the answer
Answer: d · A Transit Gateway acting as a central hub-and-spoke router
A Transit Gateway centralizes routing so each VPC attaches once, avoiding the N-squared peering mesh. Pairwise peering scales poorly and is non-transitive.
Question 28 of 30
A cloud storage service advertises 99.999999999% durability but only 99.9% availability. What does this primarily indicate?
Show the answer
Answer: b · While your data is extremely unlikely to be permanently lost, it may experience periods where it cannot be accessed.
High durability (11 nines) means the data is extremely unlikely to be permanently lost or corrupted. However, 99.9% availability implies that the data might be temporarily unreachable, as availability refers to reachability, not data preservation. Option C is incorrect because 99.9% availability does not guarantee accessibility at all times.
Read the full bite: Data Durability vs. Availability: Lost vs. Unreachable
Question 29 of 30
What is the primary drawback of storing data that requires frequent, low-latency access in a cold or archive storage tier?
Show the answer
Answer: d · It will incur significant retrieval costs and access delays.
The card states that retrieving cold data unexpectedly is slow and costly, and that retrieval fees and time delays will quickly make it more expensive than keeping it in a standard tier. Cold storage is for long-term retention, not automatic deletion.
Read the full bite: Cloud Storage Tiers: Match Cost to Access Frequency
Question 30 of 30
SSH to an instance works and the app process is running, yet the load balancer reports it unhealthy. Which is the LEAST likely useful first check?
Show the answer
Answer: d · Rebooting the entire instance before reading any probe response
Rebooting blindly discards diagnostic state and rarely addresses a probe mismatch. The productive steps reproduce the probe to find a path, port, status, or firewall mismatch.
Read the full bite: Process running but load balancer says unhealthy
Could you explain these out loud?
That is what an interview actually tests. Tezvyn gives you questions like these with what the interviewer is really checking, the answer that lands, and the mistake that ends the conversation, in the four minutes before your next meeting.
The iPhone app is on the way
We are building it. Until it lands, nothing here is held back from you: every interview card, your saved cards, streaks and the job board all work in Safari, plus hundreds of free practice quizzes of thirty questions each. Sign in and it all carries over to the app the day it arrives.
Want it as an icon? Tap Share at the bottom of Safari, then Add to Home Screen. It opens full screen and the cards you have read stay available offline.