Medium Cloud Engineer questions

34 questions · 10 points each for a correct first answer.

1. 1.Security groups vs network ACLsvpc-networking, cloud-securitymedium
2. 2.Outbound internet from a private subnetvpc-networkingmedium
3. 3.Why remote state needs lockingterraform, infrastructure-as-codemedium
4. 4.Giving a VM access to cloud APIsiam, cloud-securitymedium
5. 5.RTO and RPOdisaster-recoverymedium
6. 6.When to use Spot instancescompute, cost-optimizationmedium
7. 7.Reducing serverless cold startsserverless, performancemedium
8. 8.Cutting NAT costs for S3 trafficvpc-networking, cost-optimizationmedium
9. 9.Reading an S3 SecureTransport policycloud-storage, cloud-security, iammedium
10. 10.AccessDenied from a VPC endpoint policyiam, vpc-networking, troubleshootingmedium
11. 11.Intermittent 502s behind an ALBload-balancing, troubleshootingmedium
12. 12.Logs from a crashed containerkubernetes, troubleshootingmedium
13. 13.Pod stuck Pending: Insufficient cpukubernetes, troubleshootingmedium
14. 14.Container exit code 137 OOMKilledkubernetes, containers, troubleshootingmedium
15. 15.Slow Docker builds after every changedocker, performancemedium
16. 16.Shrinking a 1.2 GB Go imagedocker, containersmedium
17. 17.Overly broad GitHub OIDC trust policygithub-actions, iam, cloud-securitymedium
18. 18.Renaming a resource without recreating itterraform, infrastructure-as-codemedium
19. 19.Avoiding downtime on forced replacementterraform, infrastructure-as-codemedium
20. 20.Detecting drift from console changesterraform, infrastructure-as-codemedium
21. 21.SQS messages processed twicemessaging, serverlessmedium
22. 22.Lambda in a VPC cannot reach an APIserverless, vpc-networking, troubleshootingmedium
23. 23.Automatic failover for RDScloud-databases, high-availabilitymedium
24. 24.Alarm silent when the app diescloudwatch, monitoringmedium
25. 25.Requests per second in PromQLprometheus, monitoringmedium
26. 26.Prometheus memory explosionprometheus, performancemedium
27. 27.Cross-account KMS decrypt failsencryption, iammedium
28. 28.Where to keep a database passwordsecrets-management, cloud-securitymedium
29. 29.Releasing to 5 percent of traffic firstdeployment-strategies, ci-cdmedium
30. 30.Reading VPC Flow Logs for a NACL issuevpc-networking, troubleshootingmedium
31. 31.DNS failover to a DR regiondns, disaster-recoverymedium
32. 32.Versioned bucket keeps growingcloud-storage, cost-optimizationmedium
33. 33.Azure VM reading Key Vault safelyazure, iam, secrets-managementmedium
34. 34.HPA shows unknown CPU targetkubernetes, autoscalingmedium