Cloud Engineer interview question · Most asked
How do you design cloud networking for a production workload?
Summary
A VPC (VNet, VPC network) from a central address plan, public subnets only for load balancers and NAT, private subnets for compute and data across zones, security groups by tier, VPC endpoints for cloud services, centralised egress where needed, and flow logs. Connect networks through a transit hub rather than many peerings.
Longer Answer
See the networking interview pack and course for depth: overlapping CIDRs, NAT port exhaustion, MTU and DNS.
Key Points
- Planned, non-overlapping ranges.
- Public vs private subnets across zones.
- Security groups by tier.
- Endpoints, hubs, flow logs.
Deep dive: Cloud Networking in Production
Explanation
What interviewers look for
A coherent design with security and growth in mind.
More most-asked Cloud Engineer questions
- What do Multi-AZ deployments and read replicas give you for managed databases?
- Explain RTO and RPO and the four disaster recovery strategies.
- What are regions and availability zones, and how do you use them for resilience?
- How do you eliminate long-lived credentials in a cloud environment?
- How do you keep object storage buckets from being exposed publicly?
- How do you approach cloud cost optimisation?
- How is an AWS IAM request evaluated when several policies apply?
- What security services and settings belong in every cloud account from day one?