Cloud Engineer
An app server in a private subnet cannot reach an external payment service. How do you troubleshoot that connection?
What the interviewer is looking for
- This question tests cloud networking. Explains virtual networks, subnets, routing, gateways, security groups and DNS, and troubleshoots connectivity step by step.
- Strong answers: Route tables and NAT, security groups and network rules, DNS resolution, provider allow lists, flow logs, and testing from the instance.
- Likely follow-up: What logs or tools in the cloud would help you prove where traffic stops?
Another way it may be asked: Your server needs to call a payment company's website, but the calls time out. What do you check?
A structure to follow: Answer, explain, example, limits
- Step 1
Answer
Give your direct answer in the first sentence so the interviewer knows where you are going.
- Step 2
Explain
Say how it works or why you would do it that way, in plain words before jargon.
- Step 3
Example
Anchor it in something you have actually done or seen, with the detail that shows hands-on experience.
- Step 4
Limits
Say when your approach would not be the right one. It shows judgement.
This is guidance on shape, not a script. Use your own real experience and facts; never invent details to fill a gap. See the STAR guide and answer frameworks.
Common slips
- Reciting a definition without showing you have applied it.
- Using terms you cannot explain if asked a level deeper.
- Claiming experience beyond what you can discuss in detail.
How to practise it
Say the answer in 90 seconds, then answer the follow-up as if it were a new question.
Related questions
- Explain the difference between a public and a private subnet, and what kinds of resources you would put in each.
- If you had to host a simple web app with a database in the cloud, which services would you pick, and why?
- What does least privilege mean in cloud access management, and how would you apply it to a new developer joining the team?
- How do you structure infrastructure code so several teams and environments can reuse it without stepping on each other?
- Tell me about a time you cut a cloud bill. How did you find where the money was going, and what did you change?