| 1 | How do you combine multiple authorization requirements within a single policy, and how are they evaluated (AND vs OR logic)? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 2 | What is the difference between role-based and claims-based authorization in ASP.NET Core? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Beginner |
| 3 | How do you define and apply policy-based authorization for requirements more complex than a simple role or claim check? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 4 | How do you apply a global authorization policy requiring authentication by default for every endpoint, with explicit opt-out for public ones? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 5 | How do you restrict access to a minimal API endpoint or endpoint group using authorization, given minimal APIs don't use controller attributes? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 6 | How do you implement resource-based authorization, where the authorization decision depends on the specific object being accessed, not just the user's general permissions? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Advanced |
| 7 | How would you implement a custom IAuthorizationRequirement and IAuthorizationHandler for a business rule like 'only during business hours'? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Advanced |
| 8 | How does the AuthorizationMiddlewareResultHandler let you customize the response returned when authorization fails, beyond the default 401/403? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Advanced |
| 9 | How do you unit test custom authorization handlers in isolation, without needing a full HTTP request pipeline? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Advanced |
| 10 | How would you design an authorization system supporting dynamically-configurable, admin-managed permissions rather than hardcoded policies in code? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Advanced |
| 11 | What is the difference between authentication and authorization in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 12 | How do you implement role-based authorization using the [Authorize(Roles = "...")] attribute? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 13 | What is the OAuth 2.0 Client Credentials flow, and when is it used instead of the Authorization Code flow? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 14 | How does the OAuth 2.0 Authorization Code flow work, and why is it preferred over the deprecated Implicit flow for web applications? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 15 | How do you implement policy-based authorization for more complex, custom access rules beyond simple roles? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 16 | How do authentication and authorization work together in a .NET application, and how would you implement both role-based and policy-based access control? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 17 | How does the OAuth 2.0 Authorization Code flow work, and what role does Node.js typically play as the client or the resource server? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 18 | What is the difference between authentication and authorization in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Beginner |
| 19 | What is the difference between authentication and authorization in a Next.js application? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Beginner |
| 20 | What is the principle of least privilege, and how does it apply to designing an authorization system for a multi-tenant Node.js SaaS application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 21 | How do you implement role based authorization, where different users see different content based on their role? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 22 | Why must UseCors be positioned after UseRouting but before UseAuthorization in the ASP.NET Core middleware pipeline? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 23 | What is the purpose of the authentication middleware's position in the pipeline, and why must UseAuthentication come before UseAuthorization? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 24 | How do claims transformations (IClaimsTransformation) let you augment a user's claims after initial authentication but before authorization checks run? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 25 | How do you apply the same authorization, CORS, and rate limiting policies consistently across both controllers and minimal API endpoints in a hybrid application? ASP.NET Core › Controllers vs Minimal APIs | ASP.NET Core | Controllers vs Minimal APIs | Intermediate |
| 26 | Where must UseCors be positioned in the middleware pipeline relative to UseRouting and UseAuthorization, and why does this order matter? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 27 | How would you write an IAuthorizationFilter or custom authorization logic as a filter, and how does it differ from the standard [Authorize] attribute/policy system? ASP.NET Core › Filters | ASP.NET Core | Filters | Advanced |
| 28 | How do you implement authentication and authorization for gRPC services in ASP.NET Core, given gRPC calls don't carry cookies the way browser requests typically do? ASP.NET Core › gRPC Services | ASP.NET Core | gRPC Services | Advanced |
| 29 | How would you implement authentication and authorization in a GraphQL API in Node.js, given there's typically only a single HTTP endpoint? Node.js › GraphQL | Node.js | GraphQL | Advanced |
| 30 | How would you implement authentication and authorization in a GraphQL API, given all requests typically go through a single endpoint? Node.js › GraphQL with Node.js | Node.js | GraphQL with Node.js | Advanced |
| 31 | What does IsInRole() check, and how is it related to the [Authorize(Roles = "...")] attribute? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Beginner |
| 32 | What are MVC filters in ASP.NET Core, and what are the main filter types in the pipeline (authorization, resource, action, exception, result)? ASP.NET Core › Filters | ASP.NET Core | Filters | Beginner |
| 33 | How would you add custom HTTP headers (like an Authorization bearer token) to an outgoing request using HttpRequest.Builder? Java › Java Networking & HTTP Client | Java | Java Networking & HTTP Client | Beginner |
| 34 | How does API Gateway handle authentication and authorization for incoming requests? AWS › Amazon API Gateway | AWS | Amazon API Gateway | Intermediate |
| 35 | How does EKS integrate with IAM for authentication and authorization within a Kubernetes cluster? AWS › Amazon EKS (Elastic Kubernetes Service) | AWS | Amazon EKS (Elastic Kubernetes Service) | Intermediate |
| 36 | How does Symfony's security component handle authentication and authorization, including the concept of voters for fine grained access control decisions? PHP › Symfony Framework Essentials | PHP | Symfony Framework Essentials | Advanced |
| 37 | What is the difference between AuthorizeAttribute's behavior returning 401 versus 403, and what determines which one a client receives? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 38 | What is the purpose of the [AllowAnonymous] attribute, and how does it interact with a controller-level [Authorize] attribute? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 39 | How does the [Authorize] attribute interact with Razor Pages, given they don't use the traditional controller/action model? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 40 | How would you implement hierarchical or nested permission checks, like an organization admin having access to all of their organization's resources? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Advanced |
| 41 | What is ASP.NET Core Identity, and what does it provide out of the box? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 42 | How do refresh tokens work alongside short-lived access tokens, and why is this pattern used? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 43 | What is the purpose of the 'scope' parameter in OAuth 2.0, and how does it implement the principle of least privilege? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 44 | How does session-based authentication work in a Node.js/Express application, and what does the session store need to handle? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 45 | What is a JSON Web Token (JWT), and what are its three parts? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 46 | What is Passport.js, and how do its 'strategies' provide a consistent authentication abstraction across different methods? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 47 | What are JWT claims, and how do you add custom claims when issuing a token? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 48 | How does token revocation work with stateless JWTs, given they can't simply be 'deleted' server-side once issued? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 49 | How do you integrate external identity providers (Google, Microsoft Entra ID, Facebook) using OAuth/OpenID Connect in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 50 | How does token validation work under the hood when the JwtBearer middleware receives a request, and what checks does it perform? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 51 | How do you implement JWT refresh token rotation in a Node.js API, and why is it more secure than a single long-lived token? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 52 | How should passwords be securely stored in a Node.js application's database, and why is bcrypt commonly used? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 53 | What is the difference between storing an authentication token in localStorage versus an httpOnly cookie, from a security perspective? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 54 | How does JWT (JSON Web Token) authentication work at a high level in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 55 | What are the security risks of storing JWTs in browser localStorage versus HttpOnly cookies? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 56 | What is Role-Based Access Control (RBAC), and how would you implement it as Express middleware? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 57 | What is CSRF (Cross-Site Request Forgery), and how do you protect a Node.js session-based application against it? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 58 | How do you implement email verification and password-reset flows securely in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 59 | How would you implement Attribute-Based Access Control (ABAC) in a Node.js application when RBAC roles aren't expressive enough? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 60 | How do JWTs, OAuth, and Passport.js fit together in a typical Node.js authentication architecture? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 61 | How would you implement 'Sign in with GitHub' using Passport's OAuth strategy in an Express application? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 62 | How do you validate a JWT's claims (issuer, audience, expiration) beyond just verifying its cryptographic signature? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 63 | How would you protect a page in the App Router so only logged in users can access it? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Intermediate |
| 64 | How can you use middleware to protect multiple routes at once for authentication? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Intermediate |
| 65 | How does ASP.NET Core support multiple authentication schemes simultaneously (e.g., cookies for a web UI and JWT for an API in the same application)? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 66 | What is Multi-Factor Authentication (MFA), and how would you implement Time-based One-Time Password (TOTP) support in a Node.js app? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 67 | How would you implement API key authentication for a Node.js service consumed by other backend services, and what are its security limitations? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 68 | What is token introspection, and when is it needed instead of simply verifying a JWT's signature locally? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 69 | What is PKCE (Proof Key for Code Exchange), and why is it now recommended for OAuth flows even in traditional server-side Node.js applications? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 70 | What are best practices for securely storing and validating authentication tokens in a Next.js app? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 71 | What is authentication in ASP.NET Core, and how does the framework represent an authenticated user? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Beginner |
| 72 | How do you read cookies in a Next.js server component? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Beginner |
| 73 | How do you limit which routes your middleware actually applies to? Next.js › Middleware | Next.js | Middleware | Beginner |
| 74 | Why does the order in which middleware is registered matter so much in ASP.NET Core? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Intermediate |
| 75 | How do you conditionally apply middleware only to certain requests using UseWhen or MapWhen? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Intermediate |
| 76 | How does dependency injection work in Blazor components, and what's the difference between @inject and constructor injection? .NET › Blazor (Server & WebAssembly) | .NET | Blazor (Server & WebAssembly) | Intermediate |
| 77 | What is the difference between absolute expiration and sliding expiration when configuring a cache entry? .NET › Caching (In-Memory, Distributed & Redis) | .NET | Caching (In-Memory, Distributed & Redis) | Intermediate |
| 78 | What are the risks of caching sensitive or user-specific data, and how do you avoid cache poisoning across users? .NET › Caching (In-Memory, Distributed & Redis) | .NET | Caching (In-Memory, Distributed & Redis) | Intermediate |
| 79 | How do you configure a CORS policy in ASP.NET Core to allow requests from specific origins? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 80 | What does AllowCredentials() do in a CORS policy, and why can't it be combined with a wildcard origin? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 81 | What is the difference between CORS and CSRF (Cross-Site Request Forgery), and how does CORS relate to (but not fully prevent) CSRF? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 82 | How do you register a service using a factory delegate instead of a simple type mapping, when construction requires custom logic? .NET › Dependency Injection | .NET | Dependency Injection | Intermediate |
| 83 | Why is it recommended to run a containerized .NET application as a non-root user, and how do you configure this in a Dockerfile? .NET › Docker & Containerization | .NET | Docker & Containerization | Intermediate |
| 84 | How do you configure ASP.NET Core to support multiple authentication schemes simultaneously, such as both cookies for a web UI and JWT for an API? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 85 | What is ASP.NET Core Identity, and how does it provide a complete user account management system? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 86 | How does two-factor authentication (2FA) work with ASP.NET Core Identity, and what does the sign-in flow look like? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 87 | What is the difference between IAuthenticationService's SignInAsync/SignOutAsync methods and simply checking if a user 'is authenticated'? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 88 | How does authentication state flow from ASP.NET Core's cookie/JWT authentication into a Blazor component via AuthenticationStateProvider? ASP.NET Core › Blazor Integration with ASP.NET Core | ASP.NET Core | Blazor Integration with ASP.NET Core | Intermediate |
| 89 | How does the [OutputCache] attribute's VaryByValue option let you cache based on custom, computed criteria beyond query strings or headers? ASP.NET Core › Caching | ASP.NET Core | Caching | Intermediate |
| 90 | How do you organize a large number of minimal API endpoints without ending up with an enormous, unwieldy Program.cs file? ASP.NET Core › Controllers vs Minimal APIs | ASP.NET Core | Controllers vs Minimal APIs | Intermediate |
| 91 | Why can't AllowCredentials() be combined with a wildcard origin (AllowAnyOrigin), and what does this mean for cookie-authenticated cross-origin APIs? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 92 | Why should the detailed /health endpoint (with full dependency status breakdown) generally not be exposed publicly on the internet, and how do you restrict access to it? ASP.NET Core › Health Checks | ASP.NET Core | Health Checks | Intermediate |
| 93 | What is middleware in ASP.NET Core, and how does the order in which it's registered affect request handling? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Intermediate |
| 94 | What does the node:crypto module provide, and what's the difference between hashing and encryption? Node.js › Core Node.js Modules | Node.js | Core Node.js Modules | Intermediate |
| 95 | What is an unsubscribe mechanism, and what specific requirements does it need to meet for compliance with regulations like CAN-SPAM? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 96 | What is the difference between sending SMS via a provider's REST API (like Twilio) versus using SMTP-based email in terms of a Node.js integration? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 97 | What is an API Gateway, and what role does it play in front of a collection of Node.js microservices? Node.js › Microservices Architecture with Node.js | Node.js | Microservices Architecture with Node.js | Intermediate |
| 98 | How can you protect an API route so that only authenticated users can access it? Next.js › API Routes | Next.js | API Routes | Intermediate |
| 99 | How do you set a cookie in Next.js, such as after a user logs in? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Intermediate |
| 100 | How would you implement a simple session management system using cookies in Next.js? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Intermediate |
| 101 | How do you secure the route that enables Draft Mode so random visitors cannot use it? Next.js › Draft Mode & Preview Mode | Next.js | Draft Mode & Preview Mode | Intermediate |
| 102 | How would you conditionally redirect users based on something dynamic, like whether they are logged in, rather than a fixed rule in next.config.js? Next.js › Redirects & Rewrites Configuration | Next.js | Redirects & Rewrites Configuration | Intermediate |
| 103 | How do you programmatically navigate to a different page in response to a user action, such as after a successful form submission? Next.js › Routing (App/Pages Router) | Next.js | Routing (App/Pages Router) | Intermediate |
| 104 | How does UseRouting and endpoint routing (via MapControllers, MapGet, etc.) fit into the middleware pipeline conceptually? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Advanced |
| 105 | What is the recommended standard order for common middleware in a typical ASP.NET Core Web API pipeline, and why? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Advanced |
| 106 | Why is it dangerous to capture and store an HttpContext reference in a singleton-scoped service, and what should you use instead? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Advanced |
| 107 | How do you apply different CORS policies to different endpoints or controllers within the same application? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 108 | What security risks does an overly permissive CORS policy (like AllowAnyOrigin with credentials attempted, or reflecting the Origin header) introduce? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 109 | How does CORS behave differently for requests made from a mobile app or server-to-server call compared to a browser-based web app? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 110 | What information should be excluded from error responses in production to avoid leaking sensitive implementation details? .NET › Global Exception Handling & Middleware | .NET | Global Exception Handling & Middleware | Advanced |
| 111 | How does gRPC support interceptors for cross-cutting concerns like authentication, logging, and retries, similar to middleware in a REST pipeline? .NET › gRPC Services | .NET | gRPC Services | Advanced |
| 112 | How do you handle authentication for gRPC calls, and how does it differ from typical REST API authentication patterns? .NET › gRPC Services | .NET | gRPC Services | Advanced |
| 113 | How do you document authentication requirements (like a JWT bearer token) in Swagger UI so users can test authenticated endpoints interactively? ASP.NET Core › API Documentation with Swagger/OpenAPI | ASP.NET Core | API Documentation with Swagger/OpenAPI | Advanced |
| 114 | How would you exclude specific endpoints or entire controllers from appearing in the generated Swagger documentation? ASP.NET Core › API Documentation with Swagger/OpenAPI | ASP.NET Core | API Documentation with Swagger/OpenAPI | Advanced |
| 115 | How does JWT bearer authentication validate an incoming token, and what claims does TokenValidationParameters check? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 116 | How do external identity provider integrations (like Google or Microsoft Entra ID) work using OAuth/OpenID Connect authentication handlers? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 117 | How do refresh tokens work alongside short-lived JWT access tokens, and how would you implement a refresh endpoint? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 118 | How do you implement API key authentication as a custom authentication scheme for machine-to-machine API access? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 119 | How does Windows Authentication (Negotiate/Kerberos) work in ASP.NET Core for intranet applications, and when is it appropriate? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 120 | How would you implement passwordless authentication (like a magic link sent via email) in ASP.NET Core? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 121 | How does CORS behave for requests made from a mobile app, server-to-server call, or a tool like curl/Postman, compared to a browser-based web app? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Advanced |
| 122 | How would you design a route structure and constraint strategy for a large, RESTful API with deeply nested resource hierarchies (like organizations/{orgId}/projects/{projectId}/tasks/{taskId})? ASP.NET Core › Endpoint Metadata, Route Constraints & Templates | ASP.NET Core | Endpoint Metadata, Route Constraints & Templates | Advanced |
| 123 | What is horizontal scaling for a Node.js application, and what specific architectural requirement does it impose? Node.js › Cloud & DevOps | Node.js | Cloud & DevOps | Advanced |
| 124 | What security settings should always be applied to cookies that store session or authentication information? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Advanced |
| 125 | What security considerations are unique to server actions compared to regular server side code, since they can be called directly from the browser? Next.js › Server Actions & Mutations | Next.js | Server Actions & Mutations | Advanced |