Skip to main content

How to Answer Root Cause Questions

Premium

Root cause analysis questions test something specific: can you systematically investigate a problem under time pressure without wasting questions?

The framework below provides a decision tree that not only leads you to the right answer but also demonstrates the analytical instincts interviewers at top tech companies are screening for.

What interviewers are looking for

Nowadays, RCA questions are usually follow-ups. You have 10 to 15 minutes, and the interviewer is not scoring you on whether you find the right answer. They are scoring:

  • A systematic approach. Every question you ask should change what you look at next. Asking questions at random signals that you are going through a checklist, not reasoning.
  • Prioritization instincts. Where you start matters as much as where you end up. Interviewers notice immediately when a candidate goes straight to the most interesting hypothesis rather than the most likely one.
  • Thoroughness under constraint. You will not have time to investigate everything. The skill is knowing what to rule out quickly and what to explore in depth.
  • Macro awareness at the senior level. A solid investigation starts with internal causes before expanding to external ones if nothing surfaces. Senior+ candidates run both tracks in parallel, since some external factors are immediately falsifiable and can save significant investigation time.

The framework

Follow this five-step process:

  1. Define the problem
  2. State your hypothesis space
  3. Triage with shape-of-drop questions
  4. Investigate inside the bucket
  5. Determine the resolution path

The Five-Step RCA Framework

Step 1: Define the problem

Before you form a single hypothesis, you need a precise, shared definition of what is actually being measured.

Two things to nail down:

Define the metric. Is the drop in volume, rate, or quality? Each points to a different investigation. A drop in volume (fewer users completing checkout) is a different problem from a drop in rate (the same users completing at a lower percentage) even if both show up as "cart conversion declined."

Define the feature and its measurement boundaries. Get the interviewer to confirm exactly what is and is not included in the metric. This sounds pedantic but it is analytically critical.

"Before I start investigating, I want to make sure I understand the metric precisely. When we say cart conversion rate dropped, what is the denominator: cart creation or cart view? And does the metric include instant checkout flows, or only the standard cart path?"

Why does this matter? If the denominator is cart creation and your product recently launched an agentic feature that automatically creates carts on users' behalf while they review options, the denominator explodes while completions stay flat. The rate tanks. Nothing is broken. You would spend 15 minutes investigating a ghost.

Watch out for: Jumping to hypotheses before you know what is being measured. Interviewers will let you do this and watch you run in the wrong direction. Getting the definition right is not a bureaucratic warm-up; it’s the first filter.

When the question involves conflicting metrics

Sometimes the question is not a single metric drop but two metrics moving in unexpected directions at the same time. These require a different opening move.

When you encounter a conflicting metrics question, your job in Step 1 is to explicitly name the tension. What was the assumed relationship between these metrics, and what does it mean that the relationship has broken?

"Notification engagement is up week over week, but time on site is flat or declining. The assumed relationship here was that higher notification engagement would drive more session time. The tension is that users are clicking through but not staying. Before I investigate causes, I want to name what kind of break this is: are users finding what they expected and leaving satisfied, or finding something disappointing and leaving early? That distinction changes everything I look for."

This is a real pattern. Meta's analytical rounds consistently end with a conflicting-metric follow-up in exactly this shape: one engagement signal up, one retention signal flat or down. Candidates who name the tension before investigating demonstrate the kind of systems thinking that separates a strong answer from a forgettable one.

Step 2: State your hypothesis space

Before you ask a single data question, briefly name the full set of buckets you will investigate. This takes 30 seconds and accomplishes two things: it signals that you are thinking exhaustively, and it gives the interviewer a map of where you are going.

The hypothesis space has two parallel tracks: internal and external.

The Hypothesis Space

Internal track

These are causes within your product and organization:

  1. Product or UX change. A feature release, redesign, or experiment altered user behavior in an unanticipated way.
  2. Cohort effect. New users acquired from a different channel or campaign behave differently from the existing base, pulling down aggregate metrics.
  3. Quality or model regression. The product's output degraded, and users are noticing. For AI products, this includes prompt drift and model version changes.
  4. Infrastructure or latency issue. Response times increased or reliability dropped, causing users to abandon before they get value.
  5. Measurement artifact. The metric itself changed, not the underlying experience. A different usage type is being averaged in, or the definition is shifted.

External track

These are causes outside your product and organization:

  1. Competitive and market shifts. A competitor launched something significant, a platform your product depends on changed, or a broader behavioral trend shifted in your category.
  2. Seasonality and cyclical patterns. The drop follows a known calendar pattern or recurring usage cycle.
  3. Macro and out-of-control events. A government policy change, regulatory action, macroeconomic shift, or force-majeure event constrained access or demand.

Why two tracks?

The internal track covers every way your product and organization can affect a metric: what you built, who you acquired, how well the product works, how reliably it runs, and how accurately you measure it.

The external track covers every way the world outside your product can move the same metric: what competitors do, what the calendar does, and what governments and economies do.

Step 3: Triage with shape-of-drop questions

Do not jump directly into bucket-specific questions; investigate one hypothesis at a time, with no way to quickly rule things out. The right move is to ask a small number of high-leverage questions that can eliminate multiple buckets at once.

These questions are about the shape of the drop, not its cause. Shape tells you where to look. Think of this step as orienting before investigating.

Question 1: Is there any obvious external event that coincides with the timing of the drop?

AnswerWhat it implies
Yes, a competitor launch, a platform outage, a regulatory change, a major holidayThe external track has at least one live bucket. Run a quick falsifiability check on that bucket before delving into internal causes.
No known external eventExternal track is lower priority. Focus triage energy on the internal track.

This question takes ten seconds and can save your entire investigation. Seasonality, in particular, is the fastest external bucket to falsify: a single historical overlay either confirms or eliminates it.

Question 2: Was the drop sudden or gradual?

AnswerWhat it implies
Sudden (appeared within a day or two)Points toward a product/UX change, an infrastructure issue, or a measurement artifact on the internal track. Something discrete happened.
Gradual (developed over weeks or months)Points toward cohort effect or quality/model regression on the internal track. Also raises seasonality as a candidate on the external track.

Question 3: Is the drop broad-based or concentrated in a specific segment?

AnswerWhat it implies
Broad-based across all users, geographies, and devicesPoints toward product/UX change, quality regression, or measurement artifact. The whole population is affected.
Concentrated in a specific segment (geography, device type, platform, or user cohort)Points toward an infrastructure issue or cohort effect on the internal track. Also raises competitive or market shift if the concentration maps to a specific region or user type where a competitor is active.

Question 4: Did anything change on our end around the time the drop started?

AnswerWhat it implies
Yes, a release, experiment, model update, or data pipeline changeProduct/UX change or measurement artifact becomes the leading internal candidate.
No known internal changeCohort effect or quality regression becomes more likely internally. Raises the weight of the external track if there are no internal cause surfaces.

Triage Decision Tree

After these four questions, you should be able to say: "Based on this, the most likely bucket is X and possibly Y. I will start with X because [reason], and I want to run a quick check on [external bucket] in parallel since it is fast to eliminate." That statement, delivered clearly, is what demonstrates good PM instincts.

Step 4: Investigate inside the bucket

You are now inside a specific bucket. Your goal is to confirm the root cause with targeted questions, each of which narrows the space further. Each question below shows what a yes implies and what a no implies, because both directions are informative.

If two or three consecutive answers within a bucket do not fit the expected pattern, step back. Say: "This evidence is not consistent with what I would expect from a product change. I am going to revisit my triage and look at infrastructure or cohort effect instead." Stepping back when the data contradicts your hypothesis is a green flag. Do not double down on a bucket that is not fitting.

Bucket A: Product or UX change

You arrive here when: sudden drop, broad-based, internal change confirmed.

QuestionYes impliesNo implies
Was this change rolled out to 100% of users, or via a flag or experiment?Full rollout caused it with no control group to compare against. Focus on what the change altered.Compare treatment vs. control in the experiment. The treatment group is likely driving the drop.
Is the drop concentrated on a specific surface or step in the funnel?The change on that surface is the direct culprit. Narrow to that surface.The change has downstream behavioral effects across multiple surfaces. Look for second-order friction.
Did the metric drop immediately on release, or with a lag?Users hit the friction point on first encounter. The change introduced immediate friction.The behavioral change is cumulative. Users are gradually abandoning a habit that the product relied on.
Are power users and new users equally affected?The UX change is universally harmful regardless of familiarity.The change broke a workflow that power users depended on. New users, who never learned the old pattern, are less affected.

The power-user vs. new-user split is one of the highest-signal questions in this bucket. It tells you whether you are dealing with a universal friction problem or a workflow regression that only surfaces with depth of use, and that distinction determines whether the fix is a rollback or a targeted adjustment.

Bucket B: Cohort effect

You arrive here when: a gradual drop, or a concentration in recently acquired users.

QuestionYes impliesNo implies
Did acquisition volume spike recently?Dilution effect. More low-intent users are pulling down the aggregate even though the product has not changed.Volume is not the issue. Channel mix or onboarding quality is more likely.
Did the acquisition channel mix change (more paid, less organic, new market)?The new channel is bringing in users with different intents or contexts. The metric difference is a user difference, not a product problem.The problem exists within channels that have not changed. Look at the onboarding experience for new users.
Do new users from the same historical channels behave similarly to past cohorts?Something changed in onboarding or the early product experience for new users, not the channel itself.The channel is sending a structurally different user type.
Is retention for new cohorts worse at Day 1, Day 7, or later?Pinpoints where the new user experience is breaking down. Day 1 is a first-impression problem. Day 7 is a habit-formation problem.Helps isolate whether the issue is activation or longer-term engagement.

Bucket C: Quality or model regression

You arrive here when: gradual drop, broad-based, no obvious internal change event.

QuestionYes impliesNo implies
Did explicit satisfaction scores (thumbs, ratings, CSAT) drop alongside the engagement metric?Users are noticing degraded output quality and voicing their concerns. The problem is with what the product produces.The drop is behavioral but not perceived. Look at the latency or a UX change the user is not consciously aware of.
Was there a model update, prompt change, or third-party API version change around the time of the drop?Regression was introduced at that point. Start the investigation at that change.Gradual drift. Data distribution shifted, or user expectations changed without a discrete triggering event.
Are users abandoning earlier in the session, or completing sessions but rating them lower?Quality is failing before value is delivered. The output is bad enough that users give up.Users are reaching the end of the session, but the experience feels worse. A subtler quality issue.
Is the regression uniform across all use cases or concentrated in specific query types?The model degraded broadly. Likely a model version or infrastructure change.A specific capability or domain regressed. Narrows the fix to targeted retraining or a prompt adjustment.

Bucket D: Infrastructure or latency issue

You arrive here when there is a sudden drop, concentrated in a specific segment (geography, device, time window).

QuestionYes impliesNo implies
Did p95 or p99 latency increase around the time of the drop?Tail latency is degrading the experience for a meaningful subset of users. The average hides it.Look at error rates and availability rather than speed.
Is the issue isolated to a specific geography or data center region?Infrastructure or CDN issue in that region. Check for recent deployments or configuration changes in that region.The issue is client-side (device or OS) or network-level rather than server-side.
Is it device-type or OS-version specific?A client-side change or compatibility regression. Check recent app releases.Server-side or network issue. Eliminate the carrier or ISP as a variable.
Did any on-call alerts or error rate spikes fire around the same time?Confirms an infrastructure incident. Cross-reference the incident log with the metric timeline.Silent degradation. A dependency or third-party service may have degraded without triggering internal alerts.

Bucket E: Measurement artifact

You arrive here when: aggregate metric dropped, but a core user segment appears unaffected, or a pipeline or definition change occurred recently.

QuestionYes impliesNo implies
Did we change the metric definition, logging event, or attribution window recently?The drop is definitional, not real. Reconcile the old and new definitions to confirm.Look for a new usage type being averaged into the metric rather than a definition change.
Did we launch a new surface, API tier, or agentic feature that generates automated or programmatic sessions?Automated sessions are diluting the aggregate. Nothing is wrong for real users. The metric needs to be segmented going forward.Look for a data pipeline issue or sampling change as the source.
If we filter to only the user segment this metric was originally designed to measure, does the drop disappear?Confirmed measurement artifact. The metric needs to be restructured to exclude automated usage.A real drop exists even in the core segment. Return to other buckets.
Did data volume spike without a corresponding spike in real user acquisition?Bot traffic, crawler activity, or automated usage is inflating the denominator.Genuine new usage type introduced at scale. Consider whether the metric definition should evolve.

Measurement artifact is the most underweighted bucket in interview settings. Most candidates never ask, "Could this be a measurement problem?" and miss an entire class of root causes. On AI products especially, this matters: when agentic or API usage is introduced at scale, automated sessions, which are short by design, get averaged into engagement metrics built for interactive human users. The metric appears to be declining. What is actually happening is that a different kind of usage is being counted inside the same number. Calling this out explicitly signals that you have thought about how AI changes the measurement problem, not just the product.

A candidate at Cursor was asked: "We've seen a lot of usage, but PRs are going down or not making it to production. How would you think about that?"

High usage with declining downstream completion is a textbook measurement artifact i.e. the headline metric looks healthy while the real signal is buried.

Bucket F: Competitive and market shifts

You arrive here when the drop coincides with a known competitor action, a platform your product depends on changes, or a broader behavioral trend shifted in your category.

QuestionYes impliesNo implies
Did a major competitor launch a new feature or product around the time of the drop?Users may be churning to or experimenting with the competitor. Check if the drop is concentrated in segments most likely to switch: power users, price-sensitive users, or users in markets where the competitor is strongest.Competitor action is not the trigger. Check platform dependencies or broader market trends.
Did a platform your product depends on (distribution, authentication, payments, data) change or experience an outage around this time?Your product's reach or functionality was degraded by an upstream dependency. Check if the drop maps precisely to the outage or change window.Platform dependency is not the cause. Broaden to the category-level trend.
Has there been a meaningful shift in user behavior or demographics in your category (a new format gaining traction, a generational preference change)?A structural market shift is eroding your product's relevance. This is a slow-moving root cause that will not reverse without a strategic response.No category-level shift detected. The drop is product-specific, not market-wide.
Are competitors in your category experiencing the same drop, or is it isolated to your product?A market-wide force is affecting the whole category. External cause is strongly confirmed.The drop is specific to your product. Internal causes are more likely even if an external event coincides in timing.

The last question in this table is one of the most senior signals in the entire framework. Knowing whether your competitors are seeing the same trend requires market awareness beyond your own dashboards: analyst reports, app store rankings, public earnings calls, and social listening. Candidates who can demonstrate fluency with this kind of external data in an interview demonstrate that they think like a GM, not just a feature owner.

Bucket G: Seasonality and cyclical patterns

You arrive here when the drop follows a known calendar pattern or when the timing aligns with a recurring usage cycle.

QuestionYes impliesNo implies
Does this drop occur at the same time in previous years or cycles?Seasonality is the likely explanation. Confirm by overlaying current data against the same period historically. No corrective action may be needed if the drop is within tolerance.The drop is not seasonal. It is a genuine deviation worth investigating further across other buckets.
Is the magnitude of the drop within historical tolerance for this period?Expected seasonal variation. Flag it, monitor it, but treat it as normal.The drop is larger than seasonal norms. An additional factor is compounding the seasonal effect. Investigate both.
Did a major holiday, cultural event, or calendar shift (e.g., a later Lunar New Year, a World Cup cycle) coincide with the drop?A calendar effect explains the timing. Cross-reference with the user's geography to confirm that the affected regions match expectations.Cyclical calendar events are not the driver. Look at structural or competitive causes.

Seasonality is the fastest external bucket to falsify. A single historical data overlay can either confirm or rule it out in seconds. This is why it is worth checking early (even before going deep on internal buckets) when the timing of the drop makes it plausible.

Bucket H: Macro and out-of-control events

You arrive here when: no internal or competitive explanation fits, or a known large-scale external event coincides with the drop.

QuestionYes impliesNo implies
Did a government policy change, regulatory action, or platform block occur in a region where the drop is concentrated?Access or usage was constrained by an external mandate in that region. The root cause is confirmed as external.A political or regulatory cause is unlikely. Look at macroeconomic or force-majeure events.
Did a macroeconomic shift (recession signal, inflation spike, currency devaluation) coincide with the drop in a product sensitive to discretionary spending?Users are pulling back due to economic pressure. Especially relevant for e-commerce, subscription, or premium tier products. Monitor alongside retention and churn data.The macroeconomic cause is unlikely. Look at force-majeure events or return to the internal track.
Did a natural disaster, major infrastructure outage, or significant news event occur that would plausibly disrupt usage in affected regions?External disruption reduced access or attention within a specific geographic area. Confirm by isolating the drop to affected regions and checking whether it recovers post-event.No force-majeure event. If all external buckets are exhausted and the internal track has come up empty as well, re-examine your metric definition and triage assumptions.

Bucket H is the only bucket in this framework where the root cause is genuinely outside your control. That does not mean the conversation ends. A strong candidate identifies the external cause and immediately signals awareness that mitigation remains the PM's responsibility: protecting retention in affected regions, accelerating the contingency roadmap, adjusting pricing to economic conditions, or repositioning the product. Interviewers at the senior level often use this as a natural pivot into a product strategy follow-up. Being ready for that transition is part of the answer.

Step 5: Determine the resolution path

Naming the root cause is not the end of the answer. Interviewers (especially when RCA is a follow-up) will ask, or simply wait for, what you'd actually do next. This step signals that you think like a PM who owns outcomes.

The resolution path has two parts.

First, determine whether the root cause requires action at all. Not every metric drop signals a problem worth fixing. If the root cause is a measurement artifact (automated sessions inflating your denominator), the fix is a metrics architecture change, not a product change. If the drop maps cleanly to a known seasonal pattern, the right call may be to document it, monitor it, and move on. Naming this distinction explicitly tells the interviewer you're not reflexively jumping to fixes.

Second, if action is warranted, name the tradeoff and who owns it. For causes within your own product (e.g., a feature regression, a UX change with unintended effects, a quality drop) briefly assess whether the tradeoff is worth it. If a new feature caused the drop, ask: was this an expected side effect? Is the upside still worth the cost? That's the decision-making judgment interviewers are probing for.

For causes that belong to another team (i.e. a change owned by a different PM, an infrastructure issue, a model update) name the escalation path. Saying "I'd flag this to the PM who owns that surface" is a legitimate and realistic answer. It signals cross-functional awareness, not avoidance.

Interviewer pivots

Two things can happen when you are deep in Step 4 that catch candidates off guard.

The pivot. The interviewer introduces new information that redirects you to an entirely different bucket. "Let's say the analytics team just told you this drop is concentrated in Southeast Asia." This is not a curveball; it’s the interviewer extending the exercise with new evidence. The right response is to treat it as a data point, step back to Step 3, and re-triage with the new constraint. Candidates who panic here were treating the investigation as a performance rather than a live reasoning exercise.

The rabbit hole. The interviewer keeps saying yes and lets you go deeper into an increasingly specific root cause without introducing new constraints. No new information arrives; they just keep confirming. This is the interviewer stress-testing how far your domain knowledge goes within that bucket. Many candidates do not realize the exercise has been extended.

The meta-lesson: the interview is not over when you name a bucket. It is over when the interviewer signals it is. Stay in investigation mode until you get an explicit closing cue.

Common pitfalls

Skipping metric definition. Getting the measurement bounds wrong early means your entire investigation is built on a misunderstood premise. A candidate who asks "what is the denominator?" before forming hypotheses looks more rigorous, not more pedantic.

Ignoring the external track entirely. Candidates who only investigate internal causes and treat competitors or seasonality as afterthoughts miss an entire class of root causes. At senior level, this is a meaningful signal that the candidate thinks like a feature owner rather than a GM.

Raising external factors without being able to investigate them. The opposite problem: candidates who lead with competitors before checking internal causes look like they are avoiding the hard analytical work. The right move is to check the fast-falsifiable external buckets (seasonality, especially) early and hold off on the harder-to-verify ones (competitive shifts, macro) until internal causes have been explored.

Asking questions without acting on the answers. Every answer should visibly change where you go next. If a yes and a no would lead you to the same next question, you are reciting a checklist, not building a decision tree. Interviewers notice this immediately.

Ignoring the measurement artifact bucket. Most candidates never ask whether the metric itself could be the problem. On AI products, especially, this is increasingly the correct answer. Calling it out signals that you understand how AI changes the measurement problem, not just the product.

Anchoring on the first bucket that fits. The first plausible hypothesis is not always the right one. Two or three consecutive nos inside a bucket is your signal to step back and re-triage. Candidates who cannot exit a bucket gracefully appear to be guessing rather than reasoning.