Resource library

QA Interview

EY QA and SDET Interview Questions (2026)

Prepare for ey qa sdet interview questions with 50 model answers on testing, automation, APIs, SQL, coding, CI, client scenarios, and real STAR stories.

25 min read | 4,341 words

TL;DR

Prepare for EY QA and SDET interviews by matching the posted role, practicing risk-based scenarios, and proving technical claims with runnable examples. Expect the emphasis to vary across quality fundamentals, automation, APIs, data, coding, delivery, consulting communication, and behavioral judgment.

Key Takeaways

  • Treat the current job description, recruiter message, and interview invitation as authoritative because EY hiring formats vary by team, location, level, and client need.
  • Connect every testing choice to business risk, evidence, delivery constraints, and a clear release recommendation.
  • Prepare manual test design, browser automation, APIs, SQL, coding, CI, security, performance, and debugging at the depth shown on your resume.
  • Explain framework decisions through execution flow, isolation, observability, maintainability, and failure diagnosis rather than folder names.
  • Use distinct STAR stories for ownership, conflict, failure, tight deadlines, client communication, and measurable improvement.
  • Practice concise answers aloud and write runnable code without relying on memorized company-specific question lists.

This guide to ey qa sdet interview questions gives you 50 realistic practice prompts with model answers for QA Engineer, Automation Tester, and SDET roles. The strongest answers combine testing depth, engineering evidence, business risk, and clear communication instead of reciting definitions.

EY teams, locations, seniority levels, service lines, and client engagements can use different hiring stages and technology stacks. Treat your current job posting, recruiter guidance, and interview invitation as the source of truth, and use these questions as representative practice rather than a leaked or guaranteed script.

Prepare at the level claimed on your resume. If you list Selenium, Playwright, REST APIs, SQL, Java, CI/CD, performance, or cloud tools, expect the interviewer to move from a definition to design choices, failure modes, and a concrete project example.

TL;DR

Topic What the interviewer is testing Evidence to prepare
Role fit Whether your experience matches the posted work A two-minute introduction tied to the role
Test design Risk analysis, coverage, and prioritization One end-to-end scenario with boundaries and states
Delivery Defect decisions and client communication A release-risk example with options and evidence
Automation Architecture, stability, and maintainability A framework walkthrough and a flaky-test diagnosis
APIs and data Contracts, authorization, SQL, and async behavior Negative cases plus durable-state checks
Coding Correctness, readability, edge cases, and complexity Runnable code explained aloud
Nonfunctional quality Performance, security, and observability A workload or threat model with measurable oracles
Behavioral judgment Ownership, conflict, learning, and trust Five distinct STAR stories

Use company-specific QA interview loops to understand common evaluation patterns, then tailor every example to the exact EY role. You can also rehearse timed answers in the QA interview practice workspace.

1. EY QA SDET Interview Questions: Role Fit and Interview Scope

Q: What interview process should you expect for an EY QA or SDET role?

There is no reliable universal round count because the sequence can change with geography, level, hiring team, and client demand. Your invitation may include recruiter screening, technical discussion, coding or automation work, managerial evaluation, or behavioral conversation, but only the current hiring contact can confirm it. Ask which language, tools, exercise format, and interview duration apply so your preparation matches the actual assessment.

Q: How is an SDET answer different from a QA analyst answer?

A QA analyst can lead with product risk, test design, exploratory evidence, defect analysis, and stakeholder decisions. An SDET should add production-quality code, automation architecture, service interfaces, CI execution, testability, and operational diagnosis. Neither role is merely manual versus automated testing; the distinction is the expected engineering depth and ownership described in the posting.

Q: How should you answer, "Tell me about yourself"?

Build a ninety-second path from current responsibility to relevant systems, strongest quality contribution, and reason this role is a logical next step. Name the scale or constraint only when you can defend how it was measured, such as cutting a pull-request suite from 28 minutes to 17 minutes after moving setup to APIs. Finish with the job's priorities, not personal biography, so the interviewer has useful technical follow-ups.

Q: How do you turn the job description into a study plan?

Create four columns: requirement, project evidence, confidence level, and next practice action. Study the intersections between the posting and your resume first because those claims invite the deepest probing, then cover foundational gaps and relevant domain risks. For each named tool, prepare one architecture choice, one difficult failure, one trade-off, and one result you personally validated.

Q: What if the role asks for a tool you have not used professionally?

State the gap directly and connect it to an adjacent capability you genuinely possess. Demonstrate learning with a small runnable project, while labeling it as practice rather than production experience. Explain the transferable concept, such as mapping Cypress network interception knowledge to Playwright routing, and identify the remaining environment or scale questions you have not encountered.

2. Core Test Design and Manual QA Questions

Q: How would you test a login feature?

Clarify identity sources, password rules, multi-factor behavior, session lifetime, lockout, recovery, device trust, and supported clients before listing cases. Cover valid access, malformed input, boundary lengths, disabled accounts, brute-force controls, fixation, concurrent sessions, logout invalidation, accessibility, and safe error messages. Place validation at unit, API, integration, browser, security, and observability layers so a large UI matrix does not duplicate cheaper coverage.

Q: What is the difference between severity and priority?

Severity describes the technical or user impact of a defect, while priority reflects when the business chooses to address it. A misspelled campaign headline can be low severity but urgent before a paid launch; rare corruption in an archived export can be severe yet scheduled after immediate containment. Give the decision owner evidence about exposure, workaround, reversibility, compliance, and deadline instead of treating either label as an objective constant.

Q: How do you select regression tests when time is limited?

Rank coverage using changed components, dependency reach, customer usage, failure impact, defect history, detectability, and rollback difficulty. Run fast checks for build health and affected contracts first, then critical journeys, integration boundaries, and focused exploratory work around the change. Record deferred areas and pair them with monitoring, feature flags, staged rollout, or explicit risk acceptance so the recommendation remains honest.

Q: What do you do when requirements are incomplete?

Convert uncertainty into examples, decisions, and named assumptions rather than waiting for perfect documentation. Model users, states, rules, boundaries, error behavior, dependencies, and nonfunctional constraints, then ask the product and engineering owners targeted questions. Begin reversible preparation such as data design and exploratory charters while keeping unresolved choices visible in acceptance criteria.

Q: How do you run a useful exploratory testing session?

Write a charter with a target, risk, method, time box, and excluded scope, such as exploring invoice edits under interrupted network conditions for forty-five minutes. Capture coverage notes, observations, defects, questions, data, and environment details without turning the session into an unstructured click tour. Debrief on what was learned, which risks changed, and what follow-up automation or investigation now has value.

For more drills on boundaries, state transitions, and defect language, review these manual testing interview questions.

3. Agile Delivery, Defects, and Consulting Scenarios

Q: A developer rejects your defect as not reproducible. What do you do?

Compare environment, build, account state, data, feature flags, locale, time, browser, and request identifiers before debating the conclusion. Provide the smallest reproducible path with expected versus actual behavior and attach evidence that helps locate the first bad state. If it remains intermittent, pair with the developer on instrumentation or a bounded experiment and update the defect with probabilities instead of escalating personalities.

Q: How do you handle a critical defect found hours before release?

Establish affected users, data or security impact, reproducibility, exposure, workaround, and recovery options immediately. Present choices such as fix and retest, disable with a flag, restrict rollout, roll back, or accept documented residual risk under the accountable owner. QA contributes evidence and a recommendation, while the authorized product or release leader owns the business decision.

Q: What should QA do during an Agile sprint?

QA shapes examples and testability during refinement, challenges risks during planning, and collaborates on checks while code is being built. During execution, the engineer explores changed behavior, automates at appropriate layers, reviews telemetry, and keeps defects and assumptions visible. At review and retrospective, quality evidence informs acceptance and recurring failure patterns become specific process or architecture improvements.

Q: How do you work effectively with a distributed client team?

Define decision owners, working hours, handoff expectations, environments, evidence formats, and escalation paths at the start. Use concise written updates that separate facts, hypotheses, decisions needed, and next checkpoints so another timezone can act without a meeting. Protect client confidentiality by sharing only approved data and by documenting access, retention, and communication channels.

Q: A client asks for 100 percent automation. How do you respond?

Clarify whether the desired outcome is faster feedback, lower repetitive effort, audit evidence, broader regression, or a reporting target. Explain that automation value depends on risk, repeatability, determinism, execution frequency, maintenance cost, and the layer where feedback is cheapest. Propose measurable goals such as critical-journey coverage, clean-pass rate, pull-request duration, and diagnosis time while retaining exploratory testing for unknown risks.

Use Agile Scrum interview questions for QA to practice sprint, estimation, and stakeholder follow-ups.

4. UI Automation, Selenium, and Playwright Questions

Q: When would you choose Selenium instead of Playwright?

Choose against the product constraints rather than tool popularity. Selenium may fit an established WebDriver ecosystem, existing Grid investment, language requirements, or organizational libraries; Playwright offers strong browser-context isolation, web-first locators, tracing, and integrated network controls for supported engines. Compare team skills, browser obligations, runtime environment, migration cost, debugging evidence, and long-term ownership before recommending either.

Q: What makes a browser locator stable?

Prefer an accessible role and name when they represent how a user identifies the control, then consider a stable product-owned test ID for ambiguous widgets. Avoid DOM-depth selectors, styling classes, and positional indexes that encode layout rather than meaning. A locator policy also needs uniqueness checks, component contracts, and review guidance because syntax alone cannot repair an inaccessible or unstable interface.

Q: How do you diagnose a flaky automated test?

Preserve the first failure with trace, screenshot, logs, network evidence, worker identity, timing, and test data. Classify whether the instability comes from product behavior, test synchronization, shared state, environment capacity, external dependency, or assertion ambiguity, then prove one hypothesis with controlled reruns. Quarantine can protect signal briefly, but it needs an owner and deadline because retries must not convert an unknown failure into an accepted pass.

Q: How would you explain your automation framework architecture?

Walk one test from configuration and data creation through domain actions, assertions, cleanup, artifacts, and CI reporting. Describe runner, browser or HTTP clients, fixtures, component abstractions, parallel isolation, secrets, logging, retry policy, and ownership boundaries only where each solves a real problem. Finish with a decision you changed after measurement, which shows engineering judgment better than a folder diagram.

Q: Can you show a runnable Playwright test with a resilient locator?

This self-contained test uses Playwright's current getByRole locator and does not depend on an external website. Save it as accessible-form.spec.ts, install @playwright/test, install Chromium, and run the exact command below. The final assertion verifies the user-visible result rather than an internal class name.

import { test, expect } from '@playwright/test';

test('submits an accessible profile form', async ({ page }) => {
  await page.setContent(`
    <label for='display-name'>Display name</label>
    <input id='display-name' />
    <button type='button'
      onclick="document.querySelector('#output').textContent = document.querySelector('#display-name').value">
      Save profile
    </button>
    <p id='output' aria-live='polite'></p>
  `);

  await page.getByRole('textbox', { name: 'Display name' }).fill('Asha');
  await page.getByRole('button', { name: 'Save profile' }).click();
  await expect(page.getByText('Asha')).toBeVisible();
});
npm install --save-dev @playwright/test
npx playwright install chromium
npx playwright test accessible-form.spec.ts

Deepen the tool-specific follow-ups with Selenium interview questions and Playwright interview questions.

5. API, Microservices, and Contract Testing Questions

Q: How would you test a create-order API?

Define required fields, boundaries, money and currency rules, authorization, duplicate behavior, and downstream side effects before sending requests. Cover success, malformed JSON, missing data, unsupported media type, forbidden ownership, conflict, dependency timeout, and idempotent replay where the contract supports it. Verify the response schema and semantics, durable order state, emitted event, and absence of duplicate charging rather than trusting a 201 status alone.

Q: What is the practical difference between HTTP 401 and 403?

A 401 response means valid authentication credentials are missing or not accepted and normally includes an authentication challenge appropriate to the scheme. A 403 response means the server understood the identity or request but refuses the action under its authorization policy. Tests should also check that either response avoids leaking whether another tenant's protected resource exists.

Q: How do you test idempotency?

Send the same operation with the same idempotency key concurrently and sequentially, including a retry after a client timeout where the original outcome is unknown. Confirm one business effect, a contractually consistent response, correct key scope, payload-conflict behavior, expiry policy, and tenant isolation. Repeat with a different key to prove legitimate new operations are not incorrectly suppressed.

Q: How do you test eventual consistency without fixed sleeps?

Poll a meaningful read model with a deadline, bounded interval, and diagnostic history until the documented business condition appears. Correlate the original command, event, consumer, and final state using stable identifiers, while distinguishing temporary absence from terminal failure. Also test duplicate delivery, reordering, dead-letter handling, and recovery because eventual does not mean unbounded or unobservable.

Q: Can you write a runnable API test without an external service?

The following Node.js test starts an in-process HTTP server, calls it with the built-in fetch API, and closes the server after the assertion. Save it as order-api.test.mjs and run it on Node.js 20 or later. A failure returns a nonzero exit code, which makes the example suitable for CI practice.

import test from 'node:test';
import assert from 'node:assert/strict';
import http from 'node:http';

test('creates one order with an exact total', async () => {
  const server = http.createServer((request, response) => {
    response.writeHead(201, { 'content-type': 'application/json' });
    response.end(JSON.stringify({ id: 'ord-17', total: 1250, currency: 'INR' }));
  });

  await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
  const { port } = server.address();

  try {
    const response = await fetch(`http://127.0.0.1:${port}/orders`, { method: 'POST' });
    assert.equal(response.status, 201);
    assert.deepEqual(await response.json(), { id: 'ord-17', total: 1250, currency: 'INR' });
  } finally {
    await new Promise((resolve, reject) =>
      server.close((error) => error ? reject(error) : resolve())
    );
  }
});
node --test order-api.test.mjs

Practice broader status, authentication, pagination, and resilience prompts with API testing interview questions.

6. SQL and Data Validation Questions

Q: How would you find duplicate transaction references in SQL?

Group by the business key and retain groups whose count exceeds one, while deciding explicitly whether nulls belong in the result. The runnable PostgreSQL script below creates temporary data, returns pay-1 with a count of two, and rolls back the exercise. In production diagnosis, add a justified time window and inspect the underlying rows before concluding that every duplicate key represents a duplicate business event.

BEGIN;
CREATE TEMP TABLE payments (reference text, amount_cents integer);
INSERT INTO payments VALUES
  ('pay-1', 2500),
  ('pay-2', 900),
  ('pay-1', 2500),
  (NULL, 700);

SELECT reference, COUNT(*) AS occurrence_count
FROM payments
WHERE reference IS NOT NULL
GROUP BY reference
HAVING COUNT(*) > 1
ORDER BY reference;
ROLLBACK;
psql "$DATABASE_URL" --set ON_ERROR_STOP=1 --file duplicate-payments.sql

Q: How do inner and left joins change a test result?

An inner join returns only rows with matches on both sides, so it can hide missing child or reference records. A left join retains every row from the left table and supplies nulls where no match exists, making it useful for orphan detection. State which table defines completeness, whether duplicate matches multiply rows, and how nullable keys should behave before choosing the query.

Q: Why are null checks important in data testing?

SQL null represents unknown or absent data and does not compare equal with = even to another null. Validate mandatory fields, aggregates, joins, sort behavior, unique constraints, and API serialization because each can treat absence differently. Distinguish a missing value from an empty string, zero, or omitted JSON property so the oracle matches the domain contract.

Q: What do you investigate when the API and database disagree?

First determine whether the API reads the same source, replica, tenant, environment, transaction boundary, and point in time as your query. Account for caching, asynchronous projections, transformation rules, timezone conversion, soft deletion, and authorization filtering before calling the response wrong. Use a correlation ID and known test record to trace the earliest layer where the values diverge.

Q: How do you manage test data safely?

Create isolated records through supported APIs or builders, assign unique ownership, and clean up only resources created by the test. Mask production-derived data and avoid sensitive personal information in logs, fixtures, screenshots, and reports. For parallel execution, give each worker independent accounts or namespaces so a passing test never depends on execution order.

Use SQL interview questions for testers for joins, grouping, windows, and data-quality exercises.

7. Coding and Program Design Questions

Q: How should you approach a live coding question?

Restate inputs, outputs, invalid cases, size limits, ordering, and examples before selecting a data structure. Implement the simplest correct version while narrating decisions, then run normal, boundary, and adversarial cases instead of declaring success after compilation. Close with time and space complexity plus one improvement you would make if requirements or scale changed.

Q: Can you write a function that returns duplicated event IDs once?

This Java 17 program preserves the order in which each duplicated ID is first detected and rejects null input explicitly. Save it as DuplicateEvents.java, then use the shown single-file source command. The assertion covers repeated duplicates and fails visibly if the contract changes.

import java.util.ArrayList;
import java.util.HashSet;
import java.util.List;
import java.util.Set;

public class DuplicateEvents {
    static List<String> findDuplicates(List<String> eventIds) {
        if (eventIds == null) {
            throw new IllegalArgumentException("eventIds must not be null");
        }

        Set<String> seen = new HashSet<>();
        Set<String> reported = new HashSet<>();
        List<String> result = new ArrayList<>();
        for (String eventId : eventIds) {
            if (!seen.add(eventId) && reported.add(eventId)) {
                result.add(eventId);
            }
        }
        return result;
    }

    public static void main(String[] args) {
        List<String> actual = findDuplicates(List.of("e2", "e1", "e2", "e2", "e1"));
        if (!actual.equals(List.of("e2", "e1"))) {
            throw new AssertionError("Unexpected result: " + actual);
        }
        System.out.println(actual);
    }
}
java DuplicateEvents.java

Q: What is the complexity of the duplicate-event solution?

With well-behaved hash sets, the algorithm takes expected O(n) time because each event causes a constant number of set operations. It uses O(u) additional space, where u is the number of unique identifiers retained. If input exceeds memory, discuss external sorting, partitioning, or a state store rather than pretending the in-memory structure scales indefinitely.

Q: How would you test a string-reversal function?

Clarify whether reversal means bytes, UTF-16 code units, Unicode code points, or user-perceived grapheme clusters because these produce different results for emoji and combining marks. Test empty input, one element, spaces, punctuation, repeated characters, non-ASCII text, and invalid null according to the language contract. A production display feature may need a Unicode segmentation library, while an interview problem may explicitly accept code-point reversal.

Q: What makes a test utility reusable without becoming a dumping ground?

Give the helper one stable responsibility, a typed interface, deterministic behavior, and error messages that preserve useful context. Keep domain actions near the domain and infrastructure mechanics near the client instead of collecting unrelated static methods in Utils. Add focused unit tests and remove parameters that merely expose implementation details to every caller.

8. CI/CD, Performance, Security, and Observability Questions

Q: What belongs in a test automation CI pipeline?

A useful pipeline installs pinned dependencies, validates formatting or types, runs fast deterministic checks, provisions isolated configuration, and publishes actionable artifacts even on failure. Later stages can execute risk-based integration, browser, performance, or deployment verification according to cost and environment fidelity. Define ownership, secret access, timeouts, cancellation, retention, and rerun policy so the pipeline is an operational system rather than a command list.

Q: How do you triage a test failure in CI?

Identify the first failing signal and compare commit, image, dependency lockfile, environment, test data, worker, and recent passing run. Reproduce with the captured seed or trace, then classify product regression, test defect, infrastructure issue, or unknown without defaulting to "rerun until green." Route the failure to an owner and preserve evidence so repeated incidents can be grouped and removed systematically.

Q: How would you design a performance test?

Begin with a business workload that defines operations, user mix, data shape, arrival pattern, geography, duration, and service-level objectives. Validate the load generator, warm-up effects, downstream capacity, and monitoring before increasing traffic, then report percentiles, throughput, errors, and resource saturation together. Include steady load, bursts, endurance, and recovery only when each scenario answers a stated risk.

Q: What security tests should a QA engineer prioritize?

Model assets, actors, trust boundaries, permissions, inputs, secrets, and abuse paths within an explicitly authorized scope. Prioritize authentication, object-level authorization, tenant isolation, injection, unsafe upload, session handling, rate controls, dependency exposure, and sensitive-data leakage according to the application. Verify safe failures and audit evidence, and escalate specialist testing when the threat exceeds the team's competence.

Q: How do you keep secrets out of automation?

Load credentials from an approved secret store or CI identity at runtime and grant only the permissions and lifetime the test needs. Prevent tokens from appearing in source control, command output, screenshots, traces, URLs, and test reports by using redaction and safe logging defaults. Rotate any exposed value, review artifact access, and make local development use separate nonproduction identities.

Prepare additional pipeline trade-offs with CI/CD interview questions for QA.

9. EY QA SDET Interview Questions: Debugging and Client Judgment

Q: How do you investigate an intermittent production-only defect?

Bound the symptom by account, request, build, region, device, time, data, frequency, and dependency path, then preserve privacy-safe identifiers. Compare one failing and one passing trace to locate the earliest divergence and rank hypotheses that predict different observations. Add targeted telemetry or a controlled experiment in an authorized environment, contain customer impact, and verify recovery before writing the root-cause action.

Q: What if the test environment is unstable during a client demo?

Separate application defects from environment health using a pre-agreed smoke check, deployment version, dependency status, and known-good data. Communicate the limitation early, switch to an approved fallback such as captured evidence or another environment, and avoid presenting uncertain behavior as a product result. Afterward, document the failed prerequisite and add a readiness check with an owner instead of blaming the hosting team.

Q: Response time worsened after a release. How do you narrow the cause?

Compare identical workload windows across code version, configuration, cache state, query plan, dependency latency, error rate, and resource saturation. Segment percentiles by endpoint or operation because a stable average can conceal a damaged tail or low-volume critical path. Roll back or disable the change when impact and policy justify it, then use profiling and traces to confirm the suspected bottleneck.

Q: How do you answer an ambiguous system-testing scenario?

Ask for user goal, scope, architecture, constraints, highest-cost failures, data sensitivity, and release stage before proposing coverage. State reasonable assumptions when the interviewer withholds detail and organize risks across function, integration, security, performance, accessibility, resilience, and operations. Prioritize a few high-value tests with explicit oracles and explain what remains outside the time box.

Q: How would you modernize a slow legacy regression suite?

Measure duration, clean-pass rate, failure categories, maintenance effort, and coverage value before changing tools. Remove obsolete cases, move suitable checks below the UI, replace repeated setup with supported APIs, isolate data, improve diagnostics, and parallelize only after eliminating shared state. Migrate incrementally around business capabilities so releases keep protection and the team can compare signal before retiring old coverage.

Interview Questions and Answers

These behavioral prompts complete the 50-question set. Keep each response in STAR form, use a different project, protect confidential client information, and distinguish your actions from the team's work.

Q: Tell me about a quality mistake you owned.

Choose a real miss where your decision contributed to the outcome, not a disguised strength. Explain the weak assumption or signal, how you contained impact, informed stakeholders, corrected the product or test, and verified the repair. End with the durable mechanism you introduced, such as a contract check or review rule, and how you know it reduced recurrence.

Q: Describe a disagreement with a developer or product manager.

Frame the disagreement around a shared delivery objective and a concrete risk, not who had authority. Show the evidence you gathered, the other person's valid concern, the options considered, and the decision owner who resolved the trade-off. A strong reflection explains how the relationship or decision process improved even if your preferred option was not selected.

Q: How did you deliver useful testing under a tight deadline?

Name the fixed constraint and show how you ranked scope by impact, change reach, usage, detectability, and recovery. Describe the tests you selected, the work you deliberately deferred, and safeguards such as staged rollout, monitoring, or feature control. Report the result honestly without claiming exhaustive confidence from a reduced test window.

Q: Tell me about communicating difficult news to a client.

Use an example where early clarity mattered, such as a release risk, invalid estimate, or environment limitation. Explain how you separated verified facts from hypotheses, translated technical impact, offered choices, and set the next update time. Include how you protected trust through follow-through rather than presenting diplomacy alone as the achievement.

Q: Why do you want this EY QA or SDET role?

Connect your answer to the specific posting, service area, quality problem, and engineering expectations rather than relying on EY's brand name. Link two relevant experiences to the work you would perform and identify a capability you want to deepen. Keep the motivation credible by avoiding claims about culture or projects that you have not verified with the hiring team.

How Interviewers Grade Your Answers

Interviewers usually score more than the final solution. They listen for requirement clarification, risk prioritization, technical correctness, testability, evidence, trade-offs, communication, and level-appropriate ownership. A senior answer should define decision boundaries and system effects; a junior answer can still score well by being structured, honest, and precise.

Use this five-part frame without making every response sound scripted:

  1. Context: Define the system, user, constraint, and unknowns.
  2. Risk: Identify what can fail and why it matters.
  3. Action: Choose coverage, code, data, or investigation deliberately.
  4. Evidence: State the oracle, diagnostic artifact, or measurable result.
  5. Trade-off: Explain what you deferred, assumed, or would change at scale.

For coding, expect evaluation of correctness, naming, boundaries, tests, complexity, and communication while working. For behavioral questions, the score depends on personal ownership, tension, specific action, credible outcome, and reflection. Upload your resume to the QAJobFit resume workspace to identify claims that an interviewer is likely to probe.

Common Mistakes

  • Memorizing a fixed EY interview sequence and presenting it as universal.
  • Giving definitions without applying them to a product, risk, or decision.
  • Listing dozens of test cases before clarifying users, scope, and failure cost.
  • Claiming framework ownership but describing only folders and annotations.
  • Treating retries as the solution to flaky tests.
  • Validating an API only through status codes and response schemas.
  • Writing SQL without considering nulls, duplicates, timezones, or row multiplication.
  • Saying "we tested everything" when time or evidence was limited.
  • Blaming developers, clients, environments, or previous teams in scenario answers.
  • Inventing metrics, production scale, interview rounds, or EY project details.
  • Sharing confidential customer names, payloads, screenshots, or credentials.
  • Using one STAR story for every behavioral prompt.
  • Describing QA as the sole release authority instead of a risk advisor.
  • Practicing tool trivia while neglecting the technologies stated on your own resume.

Conclusion

EY QA SDET interview questions reward candidates who can connect quality fundamentals to engineering execution and client outcomes. Build depth in the stack named by the role, rehearse the 50 questions aloud, run the code samples, and replace generic claims with evidence from work you can discuss responsibly.

Your final preparation step should be a timed mock that combines one test-design scenario, one coding problem, one automation architecture discussion, one debugging investigation, and two different STAR stories. Review the recording for clarity, assumptions, and unsupported claims, then repeat only the sections that lack a concrete oracle or trade-off.

Interview Questions and Answers

How would you test a login feature?

I first confirm identity providers, session policy, recovery, multi-factor requirements, supported clients, and major abuse risks. Coverage spans business rules, API contracts, integration failures, a focused browser matrix, accessibility, security controls, and operational signals. I include lockout boundaries, session invalidation, and errors that do not disclose account existence.

How do you prioritize regression testing under time pressure?

I combine change reach, customer impact, usage, dependency risk, recent defects, observability, and rollback cost to order the work. Build health and affected contracts run before critical workflows and targeted exploration. Anything deferred is visible alongside monitoring, rollout controls, and the owner accepting the remaining exposure.

How do you resolve a defect that a developer cannot reproduce?

I align build, configuration, account state, data, locale, browser, timing, and request evidence between our runs. The defect record contains the smallest reproduction and the earliest observable divergence. For intermittent behavior, we pair on added telemetry or a controlled experiment instead of debating whether the symptom exists.

What makes a UI automation framework maintainable?

The framework separates domain intent from browser mechanics and gives tests isolated state, deterministic setup, meaningful assertions, and useful failure artifacts. Fixtures, clients, component abstractions, configuration, and reports each have clear ownership. Maintenance decisions are driven by clean-pass rate, diagnosis time, suite duration, and protected risk rather than script count.

How do you test API idempotency?

I repeat identical requests under sequential, concurrent, and timeout-retry conditions with the same key. Assertions cover one durable effect, response consistency, key scope, conflicting payloads, expiry, and separation between tenants. A control request with a fresh key confirms that legitimate new work still succeeds.

How do you validate an eventually consistent workflow?

I observe a documented business condition using deadline-bound polling and record every intermediate result for diagnosis. Correlation identifiers connect the initiating request, messages, consumer work, and read model. Duplicate events, ordering changes, terminal failures, and backlog recovery receive separate cases.

How do you find duplicate values with SQL?

I group records by the intended business key and use a HAVING count greater than one, with an explicit decision about null handling and time scope. Next I inspect the contributing rows to separate repeated storage from legitimate repeated business activity. Join multiplication and timezone boundaries are checked before reporting the result.

How do you investigate a flaky test?

I retain the initial failure's trace, logs, screenshots, network events, worker, data, and environment version. Passing and failing executions are compared to classify synchronization, shared state, product race, dependency, capacity, or weak oracle causes. Any temporary quarantine has a named owner and removal condition.

What would you include in a performance test plan?

The plan defines user operations, arrival pattern, data distribution, geography, duration, objectives, environment, and dependency limits. It validates the generator and correlates percentile latency, throughput, errors, and resource signals. Load, burst, endurance, and recovery scenarios are included only when linked to a specific business risk.

How do you communicate a release-blocking defect?

I summarize affected users, severity, exposure, reproducibility, evidence, workaround, and data or security implications. Stakeholders receive bounded options such as repair, rollback, feature disablement, restricted rollout, or explicit acceptance. My recommendation is clear, while the accountable release owner retains the decision.

Tell me about a mistake you made in testing.

I choose an actual judgment error, explain the overlooked signal, and describe my part without shifting blame. The response covers containment, transparent communication, corrective validation, and the lasting control added afterward. I also state how later evidence showed whether that control worked.

Why do you want an EY QA or SDET role?

I tie my motivation to the posted service area, technical responsibilities, and quality challenges that I can verify. Two relevant examples show how my current experience transfers, while one learning goal explains the growth I seek. I avoid assumptions about internal projects or culture that have not been confirmed.

Frequently Asked Questions

What is the EY QA or SDET interview process in 2026?

The process can differ by country, team, seniority, service line, and client need. Use the current job description, interview invitation, and recruiter guidance to confirm stages, assessment tools, language choices, and timing.

What topics should I study for an EY QA interview?

Prioritize risk-based test design, defect handling, Agile delivery, APIs, SQL, browser testing, debugging, and stakeholder communication. Add the exact domain and tools from the posting, then prepare project evidence for every matching resume claim.

Does an EY SDET interview include coding?

An SDET role can reasonably assess programming, automation design, and technical problem solving, but the format depends on the opening. Ask the recruiter which languages and exercise types are permitted, and practice runnable solutions with edge cases and complexity analysis.

Are Selenium and Playwright both useful for EY automation interview preparation?

Study the tool named in the job description most deeply. Be able to compare Selenium and Playwright through browser requirements, locator behavior, isolation, debugging, ecosystem fit, and migration cost rather than declaring one universally better.

How should I answer EY scenario-based QA questions?

Clarify the user, architecture, constraints, decision owner, and highest-cost failure before proposing tests. Then prioritize coverage, name the evidence you would collect, and state residual risk or recovery options.

How many STAR stories should I prepare for an EY QA interview?

Prepare at least five distinct stories covering failure, conflict, delivery pressure, improvement, and client or stakeholder communication. Add mentoring, security, accessibility, or performance examples when those responsibilities appear in the role.

How do I avoid sounding rehearsed in a QA interview?

Memorize the facts and decision points of your examples, not a paragraph of polished wording. Answer the exact follow-up, acknowledge uncertainty, and use concrete evidence so your structure supports a natural conversation.

Related Guides