Linux Interview Questions
Diagnosing a slow or hung service — processes and signals, cgroup limits and OOM kills, file descriptors, the shell, networking, and which tool answers which question. Framed for engineers who operate services.
Showing 1–20 of 100
#1How do Linux file permissions work?
#2What is an inode and what does it tell you?
#3What is the difference between a hard link and a symbolic link?
#4How do you find what is filling up a disk?
#5What is the difference between /proc, /sys and /dev?
#6What happens when you run out of file descriptors?
#7How do you search for files and content effectively?
#8What is a mount and what does a bind mount do?
#9How do you manage log files so they do not fill the disk?
#10What is the difference between soft and hard ulimits?
#11What is the page cache and why does free memory look low?
#12How do you transfer and synchronise files between machines?
#13What is the difference between a filesystem and a block device?
#14What does fsync do and why do databases care?
#15What is the difference between SIGTERM, SIGKILL and SIGSTOP?
#16What are the process states and what does D state mean?
#17What is a zombie process and how do you get rid of one?
#18How do you find which process is using a port?
#19What does the load average actually measure?
#20How do you find which process is consuming CPU?
Showing 1–20 of 100
Ask Aria about Linux
Sign in to chat with Aria
All 100 Linux questions at a glance
- How do Linux file permissions work?(Easy)
- What is an inode and what does it tell you?(Medium)
- What is the difference between a hard link and a symbolic link?(Easy)
- How do you find what is filling up a disk?(Medium)
- What is the difference between /proc, /sys and /dev?(Medium)
- What happens when you run out of file descriptors?(Medium)
- How do you search for files and content effectively?(Easy)
- What is a mount and what does a bind mount do?(Medium)
- How do you manage log files so they do not fill the disk?(Medium)
- What is the difference between soft and hard ulimits?(Medium)
- What is the page cache and why does free memory look low?(Medium)
- How do you transfer and synchronise files between machines?(Easy)
- What is the difference between a filesystem and a block device?(Medium)
- What does fsync do and why do databases care?(Hard)
- What is the difference between SIGTERM, SIGKILL and SIGSTOP?(Medium)
- What are the process states and what does D state mean?(Medium)
- What is a zombie process and how do you get rid of one?(Medium)
- How do you find which process is using a port?(Easy)
- What does the load average actually measure?(Medium)
- How do you find which process is consuming CPU?(Medium)
- What does strace do and when should you avoid it?(Medium)
- What is the difference between a process and a thread on Linux?(Medium)
- How do you run a process that survives logout?(Easy)
- What is the OOM killer and how do you find out it acted?(Medium)
- What is nice and how does process priority work?(Medium)
- How do you inspect a running process without stopping it?(Medium)
- What is the difference between fork and exec?(Medium)
- Why does PID 1 matter in a container?(Hard)
- What is the difference between stdout and stderr, and how do you redirect them?(Easy)
- How do pipes work and what is the exit status of a pipeline?(Medium)
- What should every bash script start with?(Medium)
- Why must you quote shell variables?(Medium)
- When would you use awk, sed, cut and grep?(Medium)
- How do you analyse a log file from the command line?(Medium)
- What is the difference between single and double quotes in bash?(Easy)
- How do you handle command-line arguments in a script?(Medium)
- What is the difference between a login shell, an interactive shell, and a script?(Medium)
- How do you schedule recurring work?(Medium)
- What is the difference between && , || and ; in a shell?(Easy)
- How do you process a large file efficiently in shell?(Medium)
- What does xargs do and when do you need it?(Medium)
- How do you make a script idempotent and safe to re-run?(Medium)
- How do you test whether a service is reachable?(Easy)
- What does ss tell you and how do you read it?(Medium)
- What is the difference between connection refused and connection timeout?(Medium)
- How do you diagnose a DNS problem?(Medium)
- What is ephemeral port exhaustion and how do you spot it?(Hard)
- What is MTU and how does a mismatch manifest?(Hard)
- How do you capture and read network traffic?(Hard)
- How do you read a routing table and troubleshoot routing?(Medium)
- What is the difference between iptables and nftables, and what do you need to know?(Hard)
- What TCP kernel parameters matter for a busy server?(Hard)
- How do network namespaces make containers work?(Hard)
- What is a Unix domain socket and when is it better than TCP?(Medium)
- How do you troubleshoot a service that works from one machine but not another?(Medium)
- What does high retransmission rate indicate?(Hard)
- A server is slow. What do you check, in what order?(Medium)
- What does high iowait actually tell you?(Hard)
- How do you tell whether a system is swapping and why does it matter?(Medium)
- How do you interpret iostat output?(Hard)
- How do you find which process is doing the disk I/O?(Medium)
- What is the difference between RSS and virtual memory size?(Medium)
- How do you diagnose a process stuck at 100% CPU?(Hard)
- What is perf and what can you do with it?(Hard)
- What is eBPF and why does it matter for observability?(Hard)
- How do cgroups limit resources and what happens at the limit?(Hard)
- Why might a container be killed with exit code 137?(Medium)
- What is the difference between user time, system time and real time?(Medium)
- How do you find a memory leak on a Linux system?(Hard)
- What do you do when a machine is unresponsive?(Medium)
- How do you compare performance before and after a change?(Medium)
- What is the difference between throughput and latency, and why can improving one hurt the other?(Hard)
- What does systemd do and what is a unit?(Medium)
- What goes in a systemd service unit for a production service?(Medium)
- How do you read logs with journalctl?(Easy)
- A systemd service will not start. How do you debug it?(Medium)
- What is socket activation?(Hard)
- How do systemd timers compare to cron?(Medium)
- What is the difference between Requires, Wants and After?(Hard)
- How do you override a systemd unit without editing the original?(Medium)
- How do you make a service restart automatically but not loop forever?(Medium)
- How do you harden a systemd service?(Hard)
- What is LVM and why use it?(Medium)
- How do you add and mount a new disk?(Medium)
- What is the difference between ext4 and XFS?(Medium)
- What do the RAID levels mean and when do you use each?(Medium)
- How do you find what is causing high disk latency?(Hard)
- What is the difference between block, file and object storage?(Medium)
- How do you safely resize a filesystem?(Medium)
- What should you know about disk usage in containers?(Medium)
- How does sudo work and how should it be configured?(Medium)
- What is setuid and why is it dangerous?(Hard)
- What are Linux capabilities?(Hard)
- How should SSH be configured for a server?(Medium)
- What is SELinux or AppArmor and why do people disable it?(Hard)
- How do you keep a Linux server patched?(Medium)
- What should you check when investigating a possibly compromised machine?(Hard)
- What is the principle of least privilege in practice on Linux?(Medium)
- How do you handle secrets on a Linux server?(Medium)
- What Linux knowledge actually matters for a backend engineer?(Easy)