CrackOps
Interview PrepTracksLinuxAWS LabSoonInterview RoomSoon
Sign inStart free
CrackOps

Interview prep for the people who keep production up.

[email protected]
ProductInterview PrepTracksDashboardInterview Room
RolesDevOpsSREPlatformCloud
CompanyAboutContactPrivacyTerms
© CrackOps
Tracks/Production Incidents
Expert 4 minTroubleshooting

Kafka lag hits two minutes during a surge, but the consumers are idle. Where do you look?

Scenario

A live-sports streaming platform pushes player telemetry (heartbeats, bitrate switches, rebuffer events) into Kafka: about 600k messages per second at the toss of a cricket final, on a 96-partition topic. The analytics consumer group feeding the live QoE dashboard is now two minutes behind. Producer error rate and latency are normal, yet the 64 consumer pods sit at 10–15% CPU.

The interviewer asks

“Producers are healthy, the consumers are barely using CPU, and lag keeps growing. Walk me through how you work out what the consumers are waiting on, and what you change during the match versus after it.”

The 30-second answer

Lag with idle consumers means they are waiting, not working, so scaling them is usually wrong. I'd look at lag per partition first: if it sits on one or two partitions it's a hot key or a stuck member; if it's even, I check whether the group is rebalancing, whether threads are blocked on a downstream call or lock, and whether the brokers are throttling or reading from disk. During the match I mitigate without changing partitioning — kill stuck members, freeze autoscaling, raise downstream concurrency, or start a fresh consumer group from latest for the live dashboard while the old one catches up. After the match I fix the key design, move to cooperative or static membership, and alert on per-partition time lag.

Sign in to finish this question

A free account unlocks the rest of it, and saves your progress across every track.

  • The voiced mock interview (4 min)
  • The full senior answer, step by step
  • Animated architecture diagrams
  • The whole conversation, 12 turns
  • Deep dive: how it works, mistakes, risks and trade-offs
  • 3 copy-ready command snippets
  • 5 follow-up questions they'll ask next
  • A self-check of 8 things interviewers listen for
Create a free accountSign in

More Production Incidents interview questions

  • The end-of-day settlement batch used to finish by 06:00 and now ends at 09:00. How do you find out why?
  • The database failed over, but the application keeps talking to the old primary. What do you do?
  • Playback failures spike for 3% of APAC viewers while CPU, memory and pods look fine. How do you triage it?
  • p99 latency on the Redis session store jumps 40x mid-match while p50 is fine. How do you find the cause?
  • Payment success rate has dropped for one bank only. How do you find out whose problem it is and protect users?
  • A payment partner slows down and your own retries turn it into an outage. How do you stop the storm?
All Production Incidents questions

Linux commands for this track

  • strace Trace the system calls a process makes
  • ltrace Trace the library calls a program makes
  • lsof List open files, sockets and the processes holding them
  • dmesg Read the kernel's message log
  • perf Profile where CPU time goes, kernel and user space
  • gdb Debug crashes, core dumps and hung processes
  • coredumpctl Find and open core dumps captured by systemd
  • sar Collect and replay system activity history