Skip to content

Site Reliability Engineer interview questions

100 real questions with model answers and explanations for Junior candidates.

See a Site Reliability Engineer resume example

Practice with flashcards

Spaced repetition · Hunter Pass

Questions

sre-practicereliability

Site Reliability Engineering applies software engineering methods to keeping services dependable and scalable.

  • SRE treats operations problems as engineering problems that can often be measured and automated.
  • Its goal is to provide the reliability users need without stopping useful product development.
  • SRE work commonly includes service objectives, observability, automation, capacity, and safe operations.
  • The discipline creates shared reliability ownership between development and operations.

Why interviewers ask this: The interviewer is checking whether the candidate understands SRE as an engineering approach to reliability rather than a renamed operations role.

reliabilityavailability

Availability is one part of reliability, while reliability covers the complete quality of service users experience over time.

  • Availability asks whether the service can successfully handle a request when needed.
  • Reliability can also include latency, correctness, durability, and consistency.
  • A service may be available but unreliable if it returns incorrect data or responds too slowly.

Why interviewers ask this: A strong answer distinguishes the broader user experience of reliability from the narrower measure of availability.

Automation turns repeatable operational work into consistent, reviewable processes.

  • Python or Bash scripts can remove small recurring manual steps.
  • Terraform and Ansible express infrastructure or configuration as version-controlled code.
  • Automated work scales better and reduces variation and human error.
  • Safe automation still needs tests, idempotence, access controls, and a recovery path.

Why interviewers ask this: The interviewer is checking whether the candidate sees automation as controlled engineering work rather than simply replacing every manual command.

sliservice-levels

An SLI is a quantitative measurement of a service behavior that matters to its users.

  • Common SLIs measure successful request ratio, request latency, throughput, or data freshness.
  • An SLI needs a precise event, success condition, data source, and aggregation method.
  • Good SLIs describe user-visible outcomes rather than internal resource usage alone.

Why interviewers ask this: The interviewer wants a measurable definition and evidence that the candidate can distinguish user outcomes from internal metrics.

sloservice-levels

An SLO is a target value or range for an SLI over a defined measurement window.

  • An example is at least 99.9% successful requests during a rolling 30-day window.
  • The target states the reliability level the team intends to provide.
  • The window defines how much data contributes to the evaluation.
  • SLOs support decisions about reliability work and acceptable release risk.

Why interviewers ask this: The interviewer is checking that the candidate includes both a numerical target and a time window in the definition.

slaservice-levels

An SLA is a formal commitment to a customer about service levels and the consequences of missing them.

  • It may promise a minimum availability or response time over a billing period.
  • Consequences can include service credits, refunds, or other contractual remedies.
  • An SLA is usually less strict than the internal SLO so the team has a safety margin.

Why interviewers ask this: A strong answer identifies the customer commitment and contractual consequences that separate an SLA from an internal target.

slo

An SLI supplies the measurement, an SLO sets its target, and an SLA turns a service promise into a formal agreement.

  • The SLI defines what is measured, such as the proportion of successful requests.
  • The SLO might require that proportion to remain at or above 99.9% for 30 days.
  • The SLA may use a related customer-facing threshold and specify remedies if it is missed.
  • Clear definitions must align so each target is based on the same understood service behavior.

Why interviewers ask this: The interviewer is evaluating whether the candidate can connect the three terms without treating them as interchangeable.

sliavailability

An availability SLI measures the proportion of valid service interactions that complete successfully.

  • A request-based form is successful valid requests divided by all valid requests.
  • A time-based form measures the proportion of time the service is usable.
  • The success criteria should reflect the full user operation, not only whether a process is running.

Why interviewers ask this: The interviewer is looking for a precise ratio and awareness that process uptime may not represent user-visible availability.

slilatency

A latency SLI measures how long a valid service operation takes from the user's perspective.

  • It can be expressed as a distribution or as the proportion of requests below a threshold.
  • Separate operations often need separate latency SLIs because their expected durations differ.
  • Failed requests should be classified consistently so fast failures do not make latency appear healthy.
  • End-to-end timing usually represents user experience better than timing one internal component.

Why interviewers ask this: A strong answer treats latency as a distribution tied to user operations rather than a single average.

throughput

A throughput indicator measures the amount of useful work a service processes per unit of time.

  • Examples include requests per second, messages per minute, or bytes transferred per second.
  • Throughput provides load context for latency and error indicators.
  • A higher value is not automatically better if errors increase or work queues grow.

Why interviewers ask this: The interviewer is checking whether the candidate understands throughput as completed work with units and necessary quality context.

An error indicator tracks explicitly failed operations, while a correctness indicator checks whether results are actually valid.

  • Error rate is commonly failed valid requests divided by all valid requests.
  • HTTP 5xx responses and failed jobs are examples of explicit errors.
  • A response with HTTP 200 can still be incorrect if its data is missing, stale, or wrong.
  • Correctness checks therefore need domain rules such as expected fields, values, or invariants.

Why interviewers ask this: The interviewer is testing whether the candidate recognizes that successful HTTP status does not guarantee a correct user result.

percentileslatency

P99 latency is the value at or below which 99% of measured requests complete.

  • If p99 is 800 ms, 99% of requests took 800 ms or less and 1% took longer.
  • Percentiles reveal slow tail behavior that an average can hide.
  • P50 represents a typical request, while p95 and p99 describe increasingly slower portions of traffic.

Why interviewers ask this: The interviewer is checking correct percentile interpretation and understanding of why averages conceal poor tail latency.

slo

A measurement window defines the period of events used to decide whether an SLO is met.

  • A rolling window always evaluates the most recent duration, such as the last 30 days.
  • A calendar window resets on fixed boundaries, such as the first day of each month.
  • Short windows react quickly but can vary sharply with small event counts.
  • Long windows smooth brief changes but reveal sustained deterioration more slowly.

Why interviewers ask this: A strong answer explains that the window changes both the meaning and the sensitivity of an SLO result.

sli

A user-centric SLI measures whether users can complete a meaningful service interaction with acceptable quality.

  • It is observed near the user boundary, such as at an API edge or client, when feasible.
  • It covers the complete operation rather than one server, container, or dependency.
  • CPU usage may explain behavior, but it does not directly state whether users succeeded.

Why interviewers ask this: The interviewer is evaluating whether the candidate chooses indicators around user outcomes instead of convenient infrastructure metrics.

error-budgetreliability

An error budget is the amount of unreliability an SLO permits during its measurement window.

  • It equals the difference between perfect reliability and the SLO target.
  • A 99.9% SLO permits 0.1% of measured events to be unsuccessful.
  • The remaining budget shows how much reliability risk is still acceptable.
  • Teams use it to balance product changes with work that protects reliability.

Why interviewers ask this: The interviewer is checking whether the candidate understands error budget as permitted unreliability and a decision-making tool.

reliabilitysloerror-budget

The budget is calculated by applying one minus the SLO target to the relevant event count or time window.

  • For 1,000,000 valid requests and a 99.9% SLO, the budget is 0.1%, or 1,000 unsuccessful requests.
  • For a 30-day time-based 99.9% SLO, the allowed unavailable time is about 43.2 minutes.
  • The calculation must use the same eligibility and success definitions as the underlying SLI.

Why interviewers ask this: A strong answer performs both calculations correctly and keeps the budget aligned with the SLI definition.

error-budgetreliability

Burn rate describes how quickly a service consumes its error budget relative to the sustainable rate.

  • A burn rate of 1 would use the whole budget exactly across the full SLO window.
  • A burn rate of 2 consumes budget twice as fast as the SLO allows.
  • Burn rate connects a current error level to the amount of budget and time remaining.
  • Multiple observation windows can distinguish brief spikes from sustained budget consumption.

Why interviewers ask this: The interviewer wants a correct relative-rate definition rather than treating burn rate as another name for error rate.

reliability

A 100% reliability target is usually impractical and can cost more than the additional user value it provides.

  • Networks, hardware, dependencies, and software can all fail, so eliminating every failure is unrealistic.
  • Approaching 100% requires increasingly expensive controls and can greatly slow product change.
  • Users may not notice reliability beyond a certain level because their own devices and networks also fail.
  • A suitable SLO sets the lowest reliability level that still meets user and business needs.

Why interviewers ask this: The interviewer is checking whether the candidate understands reliability as an economic and product trade-off rather than an absolute maximum.

reliability-metrics

MTTR describes average restoration time after a failure, while MTBF describes average operating time between failures.

  • MTTR should be defined consistently because the final R can mean repair, recovery, or restore in different organizations.
  • Lower MTTR means service is restored more quickly on average.
  • Higher MTBF means failures occur less frequently on average.
  • For a repairable system, availability is approximately MTBF divided by MTBF plus MTTR.

Why interviewers ask this: A strong answer defines both metrics, their desirable directions, and their combined relationship to availability.

RTO limits acceptable recovery time, while RPO limits acceptable data loss measured in time.

  • RTO answers how long a service may remain unavailable after a major disruption.
  • RPO answers how far back restored data may be compared with the disruption time.
  • An RTO of one hour requires restoration within one hour.
  • An RPO of five minutes permits losing at most about five minutes of recent data.

Why interviewers ask this: The interviewer is checking that the candidate does not confuse restoration duration with the amount of recoverable data loss.

Locked questions

  • 21

    How do RTO and RPO differ from ordinary SLOs?

    slodisaster-recovery
  • 22

    What is data durability and how does it differ from availability?

    availabilitydurability
  • 23

    How do service dependencies affect overall reliability?

    reliabilitydependencies
  • 24

    What is graceful degradation?

    resilience
  • 25

    Which core principles guide reliable service design?

    design
  • 26

    What is the difference between monitoring and observability?

    observabilitymonitoring
  • 27

    What roles do metrics, logs, and traces play in observability?

    observabilitymonitoring
  • 28

    What is the RED method?

    observability-methods
  • 29

    What is the USE method?

    observability-methods
  • 30

    What are the four golden signals of monitoring?

    golden-signalsmonitoring
  • 31

    What are the four Prometheus metric types?

    monitoring
  • 32

    What is label cardinality in a metrics system?

    system-designmonitoring
  • 33

    How do white-box and black-box monitoring differ?

    monitoring
  • 34

    What makes an alert actionable?

    alerting
  • 35

    What is the purpose of an operational dashboard?

    dashboards
  • 36

    What is the difference between Kubernetes liveness and readiness probes?

    kuberneteshealth-checks
  • 37

    What is an incident in SRE?

    incidentsincident-management
  • 38

    What does incident severity represent?

    incidentsincident-managementseverity-priority
  • 39

    What are the main roles in an incident response team?

    incidentsincident-management
  • 40

    What is an on-call rotation?

    on-call
  • 41

    What is escalation in incident response?

    incidentsincident-managementescalation
  • 42

    What should a runbook contain?

    runbooks
  • 43

    What is the purpose of a blameless postmortem?

    incidentspostmortems
  • 44

    What is toil in SRE?

    toilreliability
  • 45

    What is load balancing and why is it used?

    load-balancing
  • 46

    What is a single point of failure?

    resilience
  • 47

    How do redundancy and fault tolerance differ?

    resilience
  • 48

    What is the difference between horizontal and vertical scaling?

    scaling
  • 49

    What is capacity planning?

    capacitycapacity-planning
  • 50

    What does capacity headroom mean?

    capacitycapacity-planning
  • 51

    You receive a page saying a production service is unavailable. What do you do first?

  • 52

    An alert shows that API latency has doubled. How would you investigate it?

    latencyapialerting
  • 53

    The rate of HTTP 5xx responses suddenly rises. How would you respond?

    http
  • 54

    A user-facing endpoint returns connection errors, but its process appears to be running. What would you check?

    endpointsconcurrency
  • 55

    A load balancer marks every instance unhealthy. How would you investigate?

    load-balancing
  • 56

    The runbook tells you to run a command that no longer works. What do you do?

    runbooks
  • 57

    When should a junior SRE escalate an incident?

    incidentsincident-managementescalation
  • 58

    One alert pages the on-call engineer repeatedly for the same unresolved condition. What would you do?

    on-callalerting
  • 59

    A warning alert fires, but dashboards show no user impact. How would you handle it?

    alertingdashboards
  • 60

    Many alerts from different services fire within one minute. How would you triage them?

    alerting
  • 61

    Errors began immediately after a deployment. How would you decide whether to roll back?

    deploymentrollback
  • 62

    Users report slowness, but the main service dashboard looks normal. What would you do?

    dashboards
  • 63

    How would you use logs to investigate one failed request?

  • 64

    Which signals would you check first when a web service behaves badly?

  • 65

    A service instance has sustained 100% CPU. How would you respond?

  • 66

    Memory usage keeps rising until a service restarts. How would you investigate?

    memory
  • 67

    A production host is almost out of disk space. What would you do?

  • 68

    Monitoring reports that one host is unreachable. How would you triage it?

    monitoring
  • 69

    A service works by IP address but fails by hostname. How would you investigate?

  • 70

    Clients start receiving TLS certificate errors. What would you check?

    tls
  • 71

    The application cannot obtain database connections. How would you respond?

    database
  • 72

    Database latency rises during peak traffic. How would you investigate?

    databaselatency
  • 73

    The cache becomes unavailable and application latency rises. What would you do?

    cachinglatency
  • 74

    A message queue backlog is growing. How would you react?

    backlogqueuesreact
  • 75

    Your service is timing out while calling a downstream dependency. How would you respond?

    dependencies
  • 76

    A Kubernetes pod is in CrashLoopBackOff. How would you investigate?

    kubernetes
  • 77

    A newly created Kubernetes pod remains Pending. What would you check?

    kubernetes
  • 78

    A pod is running but never becomes ready. How would you troubleshoot it?

  • 79

    A Kubernetes node reports memory or disk pressure. What would you do?

    memorykubernetes
  • 80

    Traffic suddenly triples and latency starts rising. How would you respond?

    latency
  • 81

    Load is high, but the autoscaler is not adding instances. What would you check?

    scalingautoscaling
  • 82

    One instance is overloaded while the others are mostly idle. How would you investigate?

  • 83

    A single client sends enough requests to degrade the service. What would you do?

  • 84

    Capacity is exhausted and not all requests can succeed. How would you apply load shedding?

    capacityresilienceload-management
  • 85

    What information would you include in an on-call handoff?

    on-call
  • 86

    You are paged but discover you lack access to the relevant dashboard or system. What do you do?

    incident-managementsystem-designdashboards
  • 87

    A runbook includes a command that could delete data. How would you execute it safely?

    runbooks
  • 88

    How would you communicate during an active incident?

    communicationincidentsincident-management
  • 89

    Why and how would you preserve evidence during an incident?

    incidentsincident-management
  • 90

    After applying a mitigation, how would you verify that the service has recovered?

  • 91

    A service looks healthy immediately after a restart. What would you monitor next?

    monitoring
  • 92

    How would you help build an incident timeline for a postmortem?

    incidentsincident-managementpostmortems
  • 93

    How would you contribute to a blameless postmortem after making a mistake during the incident?

    ownershipincidentsincident-management
  • 94

    What makes a useful postmortem action item?

    incidentspostmortemstracking
  • 95

    The same incident has happened three times. How would you respond beyond restoring service again?

    incidentsincident-management
  • 96

    You are asked to participate in a game day that simulates a dependency outage. How would you prepare?

    dependencies
  • 97

    An alert is repeatedly confirmed as a false positive. How would you improve it?

    alerting
  • 98

    Someone proposes an untested configuration change during an incident. How would you respond?

    incidentsincident-managementconfig
  • 99

    How would you help determine the severity of a new incident?

    incidentsincident-managementseverity-priority
  • 100

    You are paged for a service you have never worked with. How would you handle it?

    incident-management