Kokil Thapa - Professional Web Developer in Nepal
Freelancer Web Developer in Nepal with 15+ Years of Experience

Kokil Thapa is an experienced full-stack web developer focused on building fast, secure, and scalable web applications. He helps businesses and individuals create SEO-friendly, user-focused digital platforms designed for long-term growth.

SRE Interview Questions and Answers

By Kokil Thapa | Last reviewed: September 2026

You applied for a Site Reliability Engineer role, and the recruiter sent a prep doc full of acronyms. SRE Interview Questions and Answers sessions rarely test trivia alone. They probe whether you can keep a service running when traffic spikes, a deploy goes wrong, or a payment webhook stalls at 2 a.m. I've spent years on the other side of that wall—maintaining Laravel apps, Ubuntu servers, and CI/CD pipelines where reliability is the product. This guide maps the questions you'll face, what interviewers listen for, and how to answer with the depth of someone who has actually paged on a production incident.

What SRE Interview Questions and Answers Should You Know About SLIs, SLOs, and SLAs?

Reliability metrics dominate early rounds. Interviewers use them to see if you distinguish user-facing signals from internal dashboards. A common trap is treating uptime percentage as the only metric that matters.

Define SLI, SLO, and SLA clearly

An SLI (Service Level Indicator) is a measured signal of service health. Examples include successful HTTP 200 responses divided by total requests, or checkout completion rate. An SLO (Service Level Objective) is an internal target for that SLI—say, 99.9% availability over 30 days. An SLA (Service Level Agreement) is a contractual promise to a customer, often with financial penalties.

Sample answer you can adapt:

"We chose request latency at p99 under 300 ms as our SLI for the booking API. Our SLO was 99.5% of requests meeting that threshold monthly. The SLA with enterprise clients promised 99.9% uptime with credits above that breach—so our SLO was stricter than the SLA to leave headroom."

On a legal-tech portal I built, lead-form submission success was a better SLI than server uptime. The app could return 200 while JavaScript failed silently. User-observable outcomes beat ping checks every time. That framing aligns with Google's SRE book on SLOs, which remains the canonical reference.

SLI → SLO → SLA StackSLIMeasured signalSLOInternal targetSLAContract promiseError Budget100% minus SLO = allowed failure roomDrives release vs stability trade-offs
SRE Interview Questions and Answers often start with the SLI-SLO-SLA chain and how error budgets connect reliability targets to engineering decisions

Pick meaningful SLIs for a web application

Interviewers may ask you to propose SLIs for an eCommerce checkout or API gateway. Walk through four categories:

  • Availability: ratio of successful responses to total requests
  • Latency: p50, p95, or p99 response time for critical paths
  • Throughput: sustained requests per second without degradation
  • Correctness: orders created without duplicate charges or lost records

Tie choices to user pain. Payment failures matter more than slow blog pages. For eCommerce platforms with delivery zones, cart-to-order conversion is often the SLI executives care about most.

Calculate an error budget

A 99.9% monthly SLO allows roughly 43 minutes of downtime per 30-day window. Interviewers want the math, not memorisation. Show the formula:

error_budget = (1 - SLO) × total_time_in_window

Example: 99.9% SLO over 30 days
= 0.001 × 30 × 24 × 60
= 43.2 minutes of allowed bad events

Explain what happens when the budget burns. Feature freezes, stricter change controls, and more testing before deploys. I've seen teams pause Friday releases after a bad week—that is error-budget policy working as designed.

Metric typeWhat it measuresWho cares mostInterview tip
SLIRaw reliability signalSRE + engineeringAlways user-facing, not CPU load
SLOInternal reliability targetEngineering leadershipSet below SLA to leave buffer
SLAContractual uptime promiseLegal + salesBreach triggers credits or penalties
Error budgetAllowed unreliabilityProduct + SREBalances velocity against stability

How Do You Answer SRE Interview Questions About Incident Management?

Incident response separates SRE candidates who have paged from those who only read runbooks. Expect a scenario: "Checkout error rate jumped 15% ten minutes ago. Walk us through your first fifteen minutes."

Structure your incident response answer

Use a clear sequence. Interviewers score communication and prioritisation, not heroics.

  1. Acknowledge and assess severity — check dashboards, confirm customer impact, declare SEV level
  2. Mitigate first, diagnose second — rollback, scale up, or disable a feature flag before root-cause deep dives
  3. Communicate — update status page, notify stakeholders, assign roles (incident commander, scribe)
  4. Investigate in parallel — logs, traces, recent deploys, dependency health
  5. Resolve and verify — confirm SLI recovery, watch for regression
  6. Postmortem — blameless write-up with action items and owners

On production Laravel deployments I've maintained, a bad release symlink swap once served stale PHP opcache. Mitigation was dep rollback and PHP-FPM reload—not hours of log grep first. Speed to mitigation wins interviews and production alike.

Incident Response FlowAlert firesTriageMitigateResolveParallel tracks during incidentComms: status page + stakeholder updatesDebug: logs, traces, deploy diffPostmortem: blameless RCA + action items
Incident management answers in SRE interviews should show mitigate-first thinking with parallel communication and investigation tracks

Explain severity levels and on-call expectations

Be ready to define SEV1 through SEV4 (or your target company's scale). A SEV1 typically means widespread customer impact or data loss risk. SEV3 might be degraded performance with a workaround.

On-call questions probe sustainability, not martyrdom. Strong answers mention:

  • Rotations with clear handoff notes and runbooks
  • Alert tuning so pages are actionable—not noise
  • Follow-the-sun or fair load split across time zones
  • Comp time or burnout policies after heavy weeks

Cross-read DevOps engineer interview questions if the role blends platform work with SRE ownership. Many mid-size companies hire one person to cover both.

What SRE Interview Questions Cover Observability and Monitoring?

Observability rounds test whether you can debug an unknown failure without SSH guesswork. Know the three pillars—metrics, logs, traces—and when each wins.

Metrics vs logs vs traces

Metrics are aggregated numbers over time: CPU, request rate, error ratio. They excel at dashboards and alerting. Logs are discrete event records—useful for "what happened to request ID abc123?" Traces follow a request across services, exposing latency in downstream calls.

Sample question: "How would you alert on elevated 5xx errors without alert fatigue?"

Strong answer elements:

  • Alert on SLO burn rate, not raw spike counts
  • Multi-window thresholds—5-minute and 1-hour views
  • Route by severity: page for SEV1, ticket for SEV3
  • Include runbook links in Alertmanager annotations

Prometheus and Alertmanager remain common in SRE stacks. Review alerting with Prometheus Alertmanager for concrete config patterns. The official Prometheus alerting overview documents routing trees and inhibition rules interviewers reference.

Design observability for a microservice

You may get a whiteboard prompt: three services, one database, one cache. Propose:

# Example Prometheus alert rule (conceptual)
- alert: HighErrorRate
  expr: |
    sum(rate(http_requests_total{status=~"5.."}[5m]))
    / sum(rate(http_requests_total[5m])) > 0.05
  for: 10m
  labels:
    severity: page
  annotations:
    summary: "Error rate above 5% for 10 minutes"
    runbook: "https://wiki.example.com/runbooks/high-errors"

Mention RED (Rate, Errors, Duration) for request-driven services and USE (Utilization, Saturation, Errors) for infrastructure nodes. OpenTelemetry is the emerging standard for vendor-neutral instrumentation—worth naming even if the team still runs legacy agents.

When parsing log samples in prep, a JSON formatter helps you study structured log fields quickly. Structured logging (JSON with request_id, user_id, trace_id) is what SRE teams expect in 2026.

Three Pillars of ObservabilityMetricsAggregated time seriesDashboards + alertsLogsDiscrete eventsDebug + audit trailTracesRequest path viewLatency breakdownCorrelate all three via shared trace_id
Observability questions in SRE interviews expect you to match metrics, logs, and traces to concrete debugging scenarios

How Should You Explain Capacity Planning and Reliability Engineering?

Mid-level and senior SRE loops include capacity, chaos, and toil reduction. These questions test forward thinking beyond firefighting.

Capacity planning without over-provisioning

Interviewers ask: "Traffic doubles next quarter—what do you do?" Outline a practical path:

  1. Review historical growth and seasonality (Dashain eCommerce spikes hit Nepal hard)
  2. Load-test critical paths with realistic traffic mixes
  3. Identify bottlenecks—database connections, queue depth, CDN limits
  4. Plan vertical scale, horizontal scale, or caching layers
  5. Define headroom target—often 30–50% above peak

Mention cost trade-offs. Doubling EC2 instances overnight is easy. Explaining Rs 200,000/month (~USD 1,500) in new spend to a founder is harder. SRE sits between engineering and finance here.

Toil reduction and automation

Google's SRE model caps operational toil at 50% of time. Toil is manual, repetitive work that scales linearly with service growth—rotating logs by hand, manual certificate renewals before Certbot, clicking through deploy checklists.

Sample answer: "I automated nightly MySQL dumps with retention policies and monitoring. That removed 3 hours of weekly manual checks across sister sites on a shared Deployer 7 pipeline. The script alerts if backup size drops—often the first sign of a silent failure."

Link automation to business outcomes. Less toil means more time for SLO work and incident prevention. Linux system administration skills matter here—systemd timers, logrotate, and firewall rules are daily SRE tools on bare metal and VPS hosts.

Chaos engineering and failure injection

Expect: "What is chaos engineering, and when would you not use it?"

Define it as controlled experiments that validate resilience assumptions—killing a pod, injecting latency, simulating AZ failure. Prerequisites include observability, rollback paths, and stakeholder buy-in. Do not run game days the week before a major product launch.

Tools interviewers name: Chaos Mesh, Litmus, AWS Fault Injection Simulator, and plain iptables rules on staging. Production chaos requires error-budget headroom and executive approval.

What System Design and Linux Questions Appear in SRE Interviews?

SRE loops often include a system design or deep technical round. You might design a rate limiter, a distributed cron, or a global load-balancing strategy.

Design a highly available web service

Start with requirements: RPS, latency target, RPO/RTO for disasters. Then layer:

  • DNS + CDN for static assets
  • Load balancer health checks with connection draining
  • Stateless app tier behind autoscaling
  • Primary/replica database with automated failover
  • Redis for session or cache with sentinel or managed failover
  • Multi-AZ minimum; multi-region if SLA demands it

Discuss trade-offs honestly. Active-active multi-region is expensive and complex. Active-passive with warm standby fits many SaaS products. See system design interview prep for shared patterns across backend and SRE roles.

HA Web Service — SRE Design SketchCDN + DNSLoad BalancerApp Node AApp Node BApp Node CMySQL PrimaryRedis CacheHealth checks + autoscaling + replica failover complete the story
System design rounds in SRE Interview Questions and Answers sessions expect layered HA architecture with explicit failure modes

Linux and networking fundamentals

SRE is not cloud-only. Expect commands and concepts from Linux interview questions for DevOps:

# Find process holding port 443
sudo ss -tlnp | grep ':443'

# Check disk saturation (await > 20ms often hurts DB)
iostat -xz 1 5

# Trace DNS resolution delay
dig +trace example.com

# Inspect connection queue overflow
netstat -s | grep -i listen

Know TCP handshake basics, TLS termination points, and HTTP/2 vs HTTP/1.1 head-of-line blocking. "What happens when you type a URL and press Enter?" still appears in 2026 loops—compress DNS, TCP, TLS, HTTP, render, but hit the SRE angles: caching, CDN miss, timeout budgets.

Kubernetes and infrastructure questions

Even if the role is platform-agnostic, Kubernetes interview questions surface constantly. Be ready to explain liveness vs readiness probes, PodDisruptionBudgets, HPA metrics, and why CrashLoopBackOff is a symptom not a diagnosis.

For teams still on VMs—which describes many Nepal SMB production stacks—discuss systemd unit hardening, PHP-FPM pool tuning, and opcache invalidation after deploy. That is real SRE work even without kubectl.

Behavioral and culture-fit questions

SRE teams prize blameless culture. Prepare STAR stories for:

  • A production outage you mitigated and what changed afterward
  • A time you pushed back on a risky release—and how you communicated it
  • Automating away painful manual work
  • Disagreeing with a developer about alert thresholds

Pair with behavioral interview prep for developers. The stories overlap; frame them through a reliability lens. Mention postmortem templates, action-item tracking, and verifying fixes weeks later—not just "we fixed the bug."

How Do You Compare SRE vs DevOps vs Platform Engineering in Interviews?

Panelists often ask where SRE ends and DevOps begins. Avoid dogma. Give a practical distinction and note that titles vary by company.

RolePrimary focusTypical outputsInterview emphasis
SREReliability measured by SLOsError budgets, incident response, toil capsSLI math, postmortems, on-call judgment
DevOpsDelivery speed and pipeline healthCI/CD, IaC, test automationPipeline design, GitOps, deploy strategies
Platform EngInternal developer experienceGolden paths, self-service portalsAPI design, abstractions, adoption metrics

Many engineers—including those doing support and maintenance on live client systems—already perform SRE work without the title. Reliability on booking platforms with Livewire and queues means monitoring failed jobs, queue latency, and payment webhook retries. That is SRE in practice.

Emerging AIOps topics may appear in senior loops. Know the realistic scope: anomaly detection on metrics, alert grouping, and runbook suggestion—not autonomous self-healing replacing on-call.

Key Takeaways

  • Anchor answers on user-observable SLIs—not server uptime alone—and show error-budget math clearly.
  • Incident responses should mitigate first, communicate in parallel, and end with blameless postmortems plus tracked action items.
  • Observability answers need metrics for alerting, logs for forensics, and traces for cross-service latency— tied to alert-fatigue prevention.
  • Capacity planning, toil automation, and controlled chaos experiments demonstrate senior SRE thinking beyond firefighting.
  • Linux fundamentals, HA system design, and Kubernetes basics still appear even in cloud-native loops—prepare command-level fluency.
  • Use STAR stories from real outages and automation wins; reliability culture matters as much as technical depth.

People Also Ask

What is the difference between an SRE and a DevOps engineer?

SRE applies software engineering to operations problems with explicit SLOs and error budgets. DevOps focuses on delivery pipelines and infrastructure automation. In practice many teams blend the roles; interviews test whether you can articulate reliability trade-offs, not just deploy scripts.

How do I prepare for an SRE interview in one week?

Review SLI/SLO/error-budget calculations, walk through two incident scenarios aloud, and refresh Linux debugging commands. Read one postmortem from a public incident report. Skim Prometheus alerting docs and practice a 20-minute HA system design sketch.

Do SRE interviews require coding?

Many include a scripting round—Python or Go—for automation tasks like parsing logs or writing health checks. Some add LeetCode-style problems at smaller companies. Ask the recruiter which format they use so you do not prep the wrong muscle.

What certifications help for SRE roles?

CKA (Kubernetes), AWS/GCP professional certs, and Prometheus training help but rarely replace production stories. Interviewers weight incident experience and SLO ownership over badge counts. Certifications fill gaps when your resume lacks cloud-native titles.

Prepare With Production Context, Not Flashcards

The best SRE Interview Questions and Answers come from lived reliability work—deploy rollbacks at midnight, tuned alerts that wake you only when needed, postmortems that actually change architecture. Study the theory, but ground every answer in mitigation speed, measurable SLOs, and sustainable on-call. If your team needs help hardening production infrastructure, monitoring, or deploy pipelines on Laravel, WordPress, or Linux stacks, review our testing and optimization services or enterprise application development work. For a conversation about reliability on your stack, reach out via contact us—and cross-train with Docker, Terraform, and AWS DevOps interview guides if your loop spans the full platform stack.

Frequently Asked Questions

Expect SLI, SLO, and SLA definitions, error-budget math, incident-response walkthroughs, observability design, capacity planning, toil reduction, chaos engineering basics, system design for high availability, Linux and networking fundamentals, Kubernetes probes, and behavioral stories about outages and blameless postmortems.

An SLI is a measured user-facing signal, such as successful HTTP responses divided by total requests or checkout completion rate. An SLO is your internal target for that signal, like 99.5% of requests under 300 ms p99 latency monthly. An SLA is a contractual customer promise, often with credits on breach. Interviewers want you to set the SLO stricter than the SLA to leave headroom. On a legal-tech portal I built, form submission success was a better SLI than server uptime because the app could return 200 while JavaScript failed silently.

Roughly 43 minutes per 30-day window. Use error_budget = (1 - SLO) × total_time_in_window, so 0.001 × 30 × 24 × 60 = 43.2 minutes.

Show the formula: error_budget = (1 - SLO) × total_time_in_window. For a 99.9% SLO over 30 days, that is 0.001 × 30 × 24 × 60 = 43.2 minutes of allowed bad events. Then explain policy: when the budget burns, teams freeze features, tighten change controls, and add pre-deploy testing. I've seen teams pause Friday releases after a bad week—that is error-budget policy working as designed, not bureaucracy.

Walk through four categories tied to user pain: availability as successful responses over total requests, latency at p50, p95, or p99 on the checkout path, throughput as sustained requests per second without degradation, and correctness as orders created without duplicate charges or lost records. Payment failures matter more than slow blog pages. For platforms with delivery zones, cart-to-order conversion is often the SLI executives care about most because it reflects real revenue impact, not internal CPU dashboards.

Structure the first fifteen minutes clearly. Acknowledge severity and confirm customer impact, then declare a SEV level. Mitigate before deep diagnosis—rollback, scale up, or disable a feature flag. Communicate via status page and assign roles like incident commander and scribe. Investigate in parallel with logs, traces, recent deploys, and dependency checks. Resolve, verify SLI recovery, and schedule a blameless postmortem with owned action items. On production Laravel deployments I've maintained, a bad symlink swap once served stale PHP opcache; dep rollback and PHP-FPM reload fixed it faster than log grep.

It means restoring service before finding root cause. Roll back a bad deploy, scale capacity, or flip a feature flag off while dashboards confirm customer impact is dropping. Interviewers score communication and prioritisation, not heroics. Deep log analysis runs in parallel once mitigation starts. Speed to mitigation wins interviews and production alike—a fifteen-minute checkout error spike needs action in minutes, not a perfect postmortem draft.

SEV1 typically means widespread customer impact or data-loss risk. SEV3 might be degraded performance with a workable workaround. SEV4 covers minor issues. Define the scale your target company uses and tie severity to user-facing SLIs, not internal noise. Strong on-call answers mention fair rotations, actionable alert tuning, follow-the-sun or balanced timezone coverage, and comp or burnout policies after heavy weeks. Many mid-size firms blend SRE and DevOps, so expect one person to cover both incident command and pipeline health.

Metrics, logs, and traces. Metrics are aggregated numbers over time for dashboards and alerting. Logs are discrete events for tracing a specific request ID. Traces follow requests across services to expose downstream latency.

Alert on SLO burn rate, not raw spike counts. Use multi-window thresholds—five-minute and one-hour views—to catch sustained problems. Route by severity: page for SEV1, ticket for SEV3. Include runbook links in Alertmanager annotations so on-call knows the first step. Prometheus and Alertmanager remain common stacks; interviewers reference routing trees and inhibition rules from the official alerting docs. Structured JSON logging with request_id and trace_id makes log correlation during those alerts far faster than unstructured grep.

RED applies to request-driven services: Rate, Errors, and Duration. USE applies to infrastructure nodes: Utilization, Saturation, and Errors. Interviewers expect you to match the framework to the component—a web API gets RED on request rate, 5xx ratio, and p99 latency; a database host gets USE on CPU utilization, connection queue saturation, and I/O errors. Pair this with the three observability pillars: metrics for dashboards, logs for request forensics, traces for cross-service latency. OpenTelemetry is worth naming as the emerging vendor-neutral instrumentation standard even if the team still runs legacy agents.

Toil is manual, repetitive work that scales linearly with service growth—rotating logs by hand, manual certificate renewals before Certbot, or clicking through deploy checklists. Google's SRE model caps toil at 50% of engineer time. Strong interview answers link automation to business outcomes: I automated nightly MySQL dumps with retention policies and size-drop alerts across sister sites on a shared Deployer 7 pipeline, removing roughly three hours of weekly manual checks. Less toil frees time for SLO work, capacity planning, and incident prevention. Linux skills—systemd timers, logrotate, firewall rules—matter daily on VPS hosts.

Chaos engineering is controlled failure injection to validate resilience assumptions—killing a pod, injecting latency, or simulating an availability-zone failure. Prerequisites include solid observability, clear rollback paths, and stakeholder buy-in. Do not run game days the week before a major product launch. Tools interviewers name include Chaos Mesh, Litmus, AWS Fault Injection Simulator, and plain iptables rules on staging. Production chaos needs error-budget headroom and executive approval. The goal is learning failure modes, not breaking production for sport.

SRE focuses on reliability measured by SLOs—error budgets, incident response, and toil caps. DevOps focuses on delivery speed and pipeline health—CI/CD, IaC, and test automation. Platform engineering focuses on internal developer experience—golden paths, self-service portals, and adoption metrics. Avoid dogma; titles vary by company. Many engineers maintaining live client systems already do SRE work without the title. Reliability on booking platforms with Livewire and queues means monitoring failed jobs, queue latency, and payment webhook retries—that is SRE in practice even without kubectl.

Start with requirements: requests per second, latency target, and RPO/RTO for disasters. Layer DNS plus CDN for static assets, a load balancer with health checks and connection draining, a stateless autoscaling app tier, primary-replica database with automated failover, and Redis for session or cache with sentinel or managed failover. Multi-AZ is the minimum; multi-region only if the SLA demands it. Discuss trade-offs honestly—active-active multi-region is expensive; active-passive with warm standby fits many SaaS products. For VM-based stacks common among Nepal SMB hosts, also mention PHP-FPM pool tuning and opcache invalidation after deploy.

Share this article

0 Comments

Leave a comment

Your email is not published. Comments appear once they have been read. Sign in to have your details filled in.

Quick Contact Options
Choose how you want to connect me: