25 Most Common Linux Interview Questions You Need to Know

Linux interview questions test your command of file systems, process management, permissions, shell scripting, and system administration. Most technical roles at companies like Google, Amazon, and Meta include at least one Linux round, because Linux powers over 96% of the world's top web servers (W3Techs, 2025). This guide covers the 25 most common questions with exact answers you can use in your next interview.

What Are Linux Interview Questions and Why Do They Matter?

Linux interview questions assess a candidate's ability to manage, troubleshoot, and optimize Linux-based systems in real production environments. Interviewers ask them because Linux is the foundation of cloud infrastructure at AWS, Google Cloud, and Azure, and most backend engineering, DevOps, and SRE roles require hands-on Linux fluency. A weak answer on file permissions or process management signals a gap that hiring managers at these companies consider disqualifying for mid-to-senior roles.

What Is the Linux Kernel and What Does It Do?

The Linux kernel is the core software layer that manages hardware resources and enables communication between applications and physical devices like CPUs, memory, and storage. It handles process scheduling, memory allocation, device drivers, and system calls. Without the kernel, no program on a Linux system can run.

Example answer: "The Linux kernel is the core of the operating system. It acts as the bridge between software applications and hardware, managing CPU time, memory, and I/O. When an application needs to read a file, the kernel handles that system call and returns the data."

What Is the Difference Between a Hard Link and a Soft Link?

A hard link is a direct pointer to the same inode as the original file, so deleting the original does not break the hard link. A soft link (symbolic link) points to the file's path, so if the original file is deleted, the soft link becomes broken. Hard links cannot span across file systems; soft links can.

Example answer: "A hard link shares the same inode as the original file. If I delete the original, the hard link still works. A soft link points to the file path, so deleting the original breaks the soft link. I use soft links for cross-filesystem shortcuts and hard links when I need guaranteed persistence."

How Do You Check Running Processes in Linux?

Use ps aux for a static snapshot of all running processes, top for a dynamic real-time view with CPU and memory usage, or htop for an interactive, color-coded version of top. For DevOps interviews, knowing how to filter with ps aux | grep processname is expected.

Example answer: "I use ps aux for a full process snapshot or top for a live view. In production troubleshooting, I often combine ps aux | grep with kill -9 to identify and terminate runaway processes quickly."

How Do You Find Files Modified in the Last 7 Days?

The find command with the -mtime flag handles this. The command find /path/to/directory -type f -mtime -7 returns all files modified within the past 7 days. The -type f flag limits results to files only, excluding directories.

Example answer: "I run find /var/log -type f -mtime -7 to locate recently changed log files. The -mtime -7 means modified less than 7 days ago. I add -ls at the end to see file sizes and timestamps inline."

What Does the chmod Command Do?

chmod changes file permissions in Linux. Permissions are set for three groups: owner, group, and others. Each group can have read (4), write (2), and execute (1) permissions. Running chmod 755 filename gives the owner full permissions and the group and others read-plus-execute access.

Example answer: "I use chmod 755 for executables that need to run by all users but only be modified by the owner. For sensitive config files, I use chmod 600 so only the owner can read or write. Mismatched permissions are one of the first things I check during a permissions-related incident."

What Is the Difference Between grep and find?

grep searches inside file contents for a text pattern. find searches the filesystem for files and directories based on attributes like name, size, type, or modification time. They solve different problems: grep answers "which files contain this string?" while find answers "which files match these attributes?"

Example answer: "If I need to locate a file by name, I use find. If I need to find which log file contains a specific error message, I use grep -r. I often combine them: find /var/log -name '*.log' | xargs grep 'error' to search log content efficiently."

What Is a Package Manager in Linux?

A package manager automates installing, updating, configuring, and removing software along with its dependencies. The three most common are APT (Debian/Ubuntu), YUM/DNF (RHEL/CentOS/Fedora), and Pacman (Arch Linux). According to the 2025 Stack Overflow Developer Survey, over 55% of professional developers work primarily on Ubuntu or Debian-based systems, making APT the most widely used package manager in production environments.

Example answer: "On Ubuntu, I use apt install to add packages and apt update && apt upgrade to keep the system current. On CentOS or RHEL systems, I switch to dnf. I always pin critical package versions in production to prevent unexpected breakage during upgrades."

How Do You Display the Last 10 Lines of a File?

The tail command displays the end of a file. Running tail -n 10 filename shows the last 10 lines. For live log monitoring, tail -f filename follows the file and streams new lines as they are written, which is essential for real-time debugging.

Example answer: "For a quick log check, I run tail -n 10 /var/log/syslog. During an active incident, I use tail -f to watch logs stream live and pair it with grep to filter for specific errors: tail -f app.log | grep ERROR."

How Do You Create a New User in Linux?

The useradd command creates a new user. Adding -m creates the user's home directory automatically. The full command is sudo useradd -m username, followed by sudo passwd username to set a password. For enterprise environments, most companies use LDAP or Active Directory integration, but knowing the native command is still expected in technical interviews.

Example answer: "I run sudo useradd -m -s /bin/bash username to create a user with a home directory and bash as the default shell. Then sudo passwd username to set the password. I also add the user to the appropriate groups with usermod -aG sudo username if they need elevated access."

What Is the Purpose of the /etc/passwd File?

The /etc/passwd file stores user account information for every account on the system. Each line contains seven colon-separated fields: username, password placeholder (x), user ID, group ID, comment, home directory, and default shell. Actual password hashes are stored in /etc/shadow, which is only readable by root.

Example answer: "/etc/passwd maps usernames to UIDs, home directories, and default shells. The password field shows 'x', which means the actual hash is in /etc/shadow. I check this file when troubleshooting login issues or verifying that a service account was created correctly."

What Is Process Management in Linux?

Process management in Linux covers creating, monitoring, prioritizing, and terminating processes. Key commands include ps for listing processes, top and htop for real-time monitoring, kill and killall for termination, and nice and renice for adjusting process priority. Every process has a PID (Process ID) and a parent PID, forming a process tree rooted at PID 1 (systemd or init).

Example answer: "Process management is how I control what runs on a server and how many resources it consumes. I use top to spot CPU spikes, kill -9 PID to force-stop a hung process, and renice to lower the priority of non-critical background jobs. In a containerized environment I also use docker stats and kubectl top alongside native Linux tools."

How Do You Display Disk Usage for All Mounted Filesystems?

The df -h command shows disk space usage for all mounted filesystems in human-readable format (GB/MB). The du -sh /path command shows disk usage for a specific directory. For production monitoring, low disk space on /var or / is a common cause of service failures, so this command appears in virtually every SRE interview.

Example answer: "I run df -h for a filesystem-level overview. If I need to find what is filling up a partition, I combine it with du -sh /var/* | sort -rh | head -20 to identify the top 20 largest directories. This is usually my first step when a disk-full alert fires."

What Is the Difference Between sudo and su?

sudo runs a single command with elevated privileges without switching to the root account. su switches the entire session to another user account, typically root. sudo is preferred in modern Linux administration because it logs every command to /var/log/auth.log, providing an audit trail that su does not.

Example answer: "I use sudo for one-off privileged commands because every action is logged. I avoid using su to become root directly in production because it bypasses the audit trail. In 2025, most security policies at regulated companies require sudo with MFA rather than allowing direct root logins."

What Is a Daemon in Linux?

A daemon is a background process that starts at boot time and runs continuously to handle system-level tasks without user interaction. Common examples include sshd (handles SSH connections), httpd (Apache web server), crond (scheduled tasks), and systemd (the init system that manages all other services). On systemd-based systems, daemons are managed with systemctl start|stop|enable|status servicename.

Example answer: "A daemon is a background service with no controlling terminal. On modern systems I manage daemons with systemctl. For example, systemctl status nginx tells me if the web server is running and shows recent log entries. I use systemctl enable to make a service start automatically on reboot."

What Is the Significance of the PATH Environment Variable?

The PATH variable is a colon-separated list of directories the shell searches when you type a command. When you run python3, the shell checks each directory in PATH in order and runs the first match it finds. Modifying PATH changes which version of a tool gets executed, which matters when managing multiple Python or Node.js versions on the same server.

Example answer: "PATH determines which binary runs when I type a command. I prepend custom paths with export PATH=/usr/local/myapp/bin:$PATH so my version takes precedence over the system default. A misconfigured PATH is one of the first things I check when a command 'not found' error appears after a deployment."

What Are Inodes in Linux?

An inode is a data structure that stores metadata about a file or directory, including size, permissions, ownership, timestamps, and pointers to the actual data blocks on disk. Every file has exactly one inode, identified by an inode number. The filename itself is stored in a directory entry, not the inode. Running out of inodes (even with free disk space) will prevent new files from being created, which is a real production failure mode on servers with millions of small files.

Example answer: "An inode holds all metadata for a file except its name. I check inode usage with df -i. On one production server running a mail queue, we ran out of inodes while the disk still had 40% free space, because millions of small queued messages had consumed every available inode. Knowing this distinction has saved me hours of debugging."

How Do You Find the Largest File in a Directory?

Combine find and du with a sort and head to identify the largest file: find /path -type f -exec du -h {} + | sort -rh | head -n 1. For a broader top-10 view, change head -n 1 to head -n 10. This command is common in disk-space troubleshooting scenarios during SRE and DevOps interviews.

Example answer: "I run find /var -type f -exec du -h {} + | sort -rh | head -10 to list the 10 largest files under /var. In practice, the biggest offenders are usually core dump files, unrotated logs, or large database backups left in the wrong directory."

What Is the Purpose of the top Command?

The top command provides a live, auto-refreshing view of system resource usage, showing CPU percentage, memory consumption, swap usage, load average, and a ranked list of the most resource-intensive processes. Press M inside top to sort by memory, P to sort by CPU, and k to kill a process by PID without leaving the interface.

Example answer: "I open top as my first diagnostic step when a server is slow. I look at load average relative to CPU count first, then sort by CPU with P to find the offending process. If memory is the issue, I switch to M sort and look for processes near the top consuming large RSS values."

How Can You Practice Linux Interview Questions Before Your Interview?

The fastest way to prepare is to practice answering Linux questions out loud in a timed environment that mirrors real interview conditions. Final Round AI's AI Mock Interview simulates technical screens with real Linux and system administration questions, scoring your answers on accuracy, completeness, and delivery. For live interview support, Interview Copilot provides real-time answer suggestions during actual technical interviews in 2025 and 2026. You can also build and upload your resume with relevant Linux skills using the AI Resume Builder to ensure your experience is framed for the roles you are targeting.

Joining the Final Round AI community gives you access to threads where engineers share real Linux questions they received at Google, Amazon, and Meta, so you can benchmark your answers against what is actually being asked right now.

Shell Scripting Questions You Will Face

Beyond individual commands, interviewers at companies like Netflix and Stripe expect you to write shell scripts on the spot. The four most common scripting tasks are: (1) check if a file exists using the -e flag in an if statement, (2) count lines in a file using wc -l, (3) back up a directory with cp -r or tar, and (4) monitor CPU usage and trigger an alert when it exceeds a threshold using top -bn1 piped through awk. Practice these four patterns and you will cover roughly 80% of scripting questions in a typical Linux interview round.

For a deeper dive into technical interview formats, read our guide on system design interview questions and our breakdown of how to prepare for technical interviews.

Browse all interview prep resources in the interview questions category on Final Round AI.

Frequently Asked Linux Interview Questions

What Linux commands come up most in technical interviews? The most tested commands are chmod, find, grep, ps, top, df, tail, and useradd. Interviewers at cloud-focused companies also test ssh, scp, netstat, and systemctl regularly.

How hard are Linux questions in a software engineering interview? For SWE roles, Linux questions are usually at the intermediate level, covering file permissions, process management, and basic shell scripting. SRE and DevOps roles go deeper into kernel parameters, networking commands, and performance tuning tools like iostat and vmstat.

What is the difference between a process and a thread in Linux? A process is an independent program with its own memory space, PID, and resources. A thread is a unit of execution within a process, sharing the same memory space as its parent. Linux implements threads using clone() system calls, and tools like ps -eLf show individual threads alongside their parent PIDs.

How do you troubleshoot high CPU usage in Linux? Start with top or htop to identify the high-CPU process by PID. Then use strace -p PID to trace system calls, lsof -p PID to see open files, and check application logs. If the process is a kernel thread, check with perf top to identify which kernel function is consuming cycles.

What Linux experience do employers look for in 2026? Most job postings for backend, DevOps, and SRE roles in 2026 list proficiency with systemd service management, bash scripting, SSH key management, and familiarity with container runtimes like Docker running on Linux hosts. Hands-on experience with at least one major distribution (Ubuntu, RHEL, or Amazon Linux) is expected.

Related Interview Guides

• System Design Interview Questions - Covers distributed systems, load balancing, and database scaling questions that pair directly with Linux infrastructure knowledge.
• Technical Interview Tips - How to structure your answers, manage time under pressure, and handle questions you do not know.
• DevOps Interview Questions - CI/CD pipelines, Docker, Kubernetes, and cloud infrastructure questions for DevOps and SRE roles.
• Python Interview Questions - Python scripting complements Linux administration and comes up in the same technical rounds.

Ace Your Linux Interview with Final Round AI

Linux proficiency is a gating requirement for most backend, DevOps, and SRE roles at top tech companies. Use AI Mock Interview to practice command-line scenarios under real interview conditions, and rely on Interview Copilot for live answer support during your actual technical screen. The candidates who land these roles are the ones who have practiced their answers out loud, not just read through a list.