Skip to content
Job preparation

Cloud Platform Architect · 3-5 Years

Real implementation, debugging, tools, logs, edge cases, and measurable fixes.

Try each answer before revealing the suggested coaching answer.

← All Cloud Platform Architect levels

25 questions

01You are working on a production project and cloud landing zone starts causing issues. How would you diagnose and fix it as a Cloud Platform Architect?

A production answer

Say this first: cloud landing zone should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply cloud landing zone, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → cloud landing zone → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 1
02How have you implemented account/subscription strategy in a real Cloud Architecture project?

A production answer

Say this first: The important point about account/subscription strategy is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply account/subscription strategy, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → account/subscription strategy → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 2
03A release is blocked because of a problem related to hub-spoke networking. What steps would you take?

A production answer

Say this first: hub-spoke networking should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply hub-spoke networking, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → hub-spoke networking → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 3
04What logs, metrics, or artifacts would you check while troubleshooting VPC/VNet design?

A production answer

Say this first: The important point about VPC/VNet design is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply VPC/VNet design, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → VPC/VNet design → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 4
05How would you make identity federation reliable enough for day-to-day production use?

A production answer

Say this first: identity federation should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply identity federation, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → identity federation → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 5
06You are working on a production project and IAM governance starts causing issues. How would you diagnose and fix it as a Cloud Platform Architect?

A production answer

Say this first: IAM governance should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply IAM governance, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → IAM governance → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 6
07How have you implemented shared services platform in a real Cloud Architecture project?

A production answer

Say this first: The important point about shared services platform is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply shared services platform, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → shared services platform → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 7
08A release is blocked because of a problem related to Kubernetes platform design. What steps would you take?

A production answer

Say this first: Kubernetes platform design should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply Kubernetes platform design, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → Kubernetes platform design → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 8
09What logs, metrics, or artifacts would you check while troubleshooting serverless platform strategy?

A production answer

Say this first: The important point about serverless platform strategy is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply serverless platform strategy, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → serverless platform strategy → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 9
10How would you make IaC standards reliable enough for day-to-day production use?

A production answer

Say this first: IaC standards should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply IaC standards, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → IaC standards → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 10
11You are working on a production project and policy-as-code guardrails starts causing issues. How would you diagnose and fix it as a Cloud Platform Architect?

A production answer

Say this first: policy-as-code guardrails should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply policy-as-code guardrails, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → policy-as-code guardrails → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 11
12How have you implemented cloud security posture in a real Cloud Architecture project?

A production answer

Say this first: The important point about cloud security posture is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply cloud security posture, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → cloud security posture → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 12
13A release is blocked because of a problem related to logging and monitoring baseline. What steps would you take?

A production answer

Say this first: logging and monitoring baseline should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply logging and monitoring baseline, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → logging and monitoring baseline → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 13
14What logs, metrics, or artifacts would you check while troubleshooting backup and DR strategy?

A production answer

Say this first: The important point about backup and DR strategy is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply backup and DR strategy, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → backup and DR strategy → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 14
15How would you make multi-region design reliable enough for day-to-day production use?

A production answer

Say this first: multi-region design should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply multi-region design, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → multi-region design → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 15
16You are working on a production project and hybrid connectivity starts causing issues. How would you diagnose and fix it as a Cloud Platform Architect?

A production answer

Say this first: hybrid connectivity should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply hybrid connectivity, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → hybrid connectivity → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 16
17How have you implemented private endpoints in a real Cloud Architecture project?

A production answer

Say this first: The important point about private endpoints is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply private endpoints, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → private endpoints → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 17
18A release is blocked because of a problem related to secrets and key management. What steps would you take?

A production answer

Say this first: secrets and key management should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply secrets and key management, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → secrets and key management → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 18
19What logs, metrics, or artifacts would you check while troubleshooting FinOps and tagging?

A production answer

Say this first: The important point about FinOps and tagging is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply FinOps and tagging, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → FinOps and tagging → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 19
20How would you make cost allocation reliable enough for day-to-day production use?

A production answer

Say this first: cost allocation should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply cost allocation, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → cost allocation → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 20
21You are working on a production project and platform self-service starts causing issues. How would you diagnose and fix it as a Cloud Platform Architect?

A production answer

Say this first: platform self-service should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply platform self-service, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → platform self-service → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 21
22How have you implemented golden paths in a real Cloud Architecture project?

A production answer

Say this first: The important point about golden paths is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply golden paths, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → golden paths → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 22
23A release is blocked because of a problem related to compliance automation. What steps would you take?

A production answer

Say this first: compliance automation should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply compliance automation, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → compliance automation → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 23
24What logs, metrics, or artifacts would you check while troubleshooting migration factory?

A production answer

Say this first: The important point about migration factory is how an engineer recognizes the unsafe path early and prevents it from becoming customer impact.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply migration factory, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • Start with containment and evidence. Changing several variables at once makes the incident harder to understand.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → migration factory → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 24
25How would you make cloud operating model reliable enough for day-to-day production use?

A production answer

Say this first: cloud operating model should be explained through its purpose, the boundary where it applies, and the evidence that shows it is working.

Use a real scenario

Imagine a service being expanded from one product team to several dependent teams. The team must decide how to apply cloud operating model, verify the result, and explain the user impact. For a Cloud Platform Architect, attach the explanation to an architecture decision record and NFR matrix.

Show judgment

  • describe the implementation path, the main trade-off, and the evidence you would collect.
  • State the constraint that could change your decision, such as scale, data sensitivity, recovery target, or team ownership.
  • Call out coupling, unclear ownership, or an irreversible vendor choice and the control that reduces it.

Concrete check

kubectl rollout status deployment/<service> --timeout=90s

Evidence to mention

Track SLO attainment, delivery lead time, and total operating cost. Say what baseline you compared against, what would trigger a rollback or escalation, and who owns the follow-up.

request or change → guardrail / validation → cloud operating model → observable result → owner review

Practice prompt: Use a service being expanded from one product team to several dependent teams as the example and show where you would stop a risky rollout.

Link to question 25

Further reading

These are original practice questions and suggested answers. Adapt them to your own work and explain evidence, trade-offs, and limitations.