| 1 | How do you store authentication tokens securely in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Beginner |
| 2 | How do you store authentication tokens securely in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Beginner |
| 3 | How do you add biometric authentication (fingerprint/Face ID)? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 4 | How do you add biometric authentication (fingerprint/Face ID)? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 5 | What are key security best practices for a production MAUI app? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 6 | What are key security best practices for a production MAUI app? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 7 | How do you implement OAuth/OpenID Connect login in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 8 | How do you enforce SSL/certificate pinning in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 9 | How do you implement OAuth/OpenID Connect login in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 10 | How do you enforce SSL/certificate pinning in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 11 | How do you protect API keys and secrets that the app needs? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 12 | How do you protect API keys and secrets that the app needs? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 13 | How do biometric authentication methods, such as fingerprint or face recognition, add an additional meaningful layer of security to a sensitive Flutter app, and how does the local_auth package help implement this feature? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Advanced |
| 14 | What is the difference between storing an authentication token in localStorage versus an httpOnly cookie, from a security perspective? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 15 | How does Firebase Authentication integrate together with Firestore security rules to properly control exactly which specific data a given authenticated user is actually allowed to access? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 16 | How would you implement API key authentication for a Node.js service consumed by other backend services, and what are its security limitations? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 17 | What is the difference between authentication and authorization in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 18 | How should a Flutter app properly detect whether it is currently running on a rooted Android device or a jailbroken iOS device, and what genuine security risks does running on such a compromised device actually introduce? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Advanced |
| 19 | How do you set a password to require authentication before clients can execute commands on a Redis instance? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Beginner |
| 20 | What is Firebase Authentication, and what different sign in methods does it support out of the box for a Flutter app? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Beginner |
| 21 | How does the flutter_secure_storage package let you securely store sensitive data, such as an authentication token, on a user's device using each platform's own native secure storage mechanism? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Beginner |
| 22 | How do JWTs, OAuth, and Passport.js fit together in a typical Node.js authentication architecture? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 23 | Why should you avoid storing sensitive information, like an authentication token, directly in your React app's regular JavaScript state or a global variable? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Intermediate |
| 24 | How can you use middleware to protect multiple routes at once for authentication? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Intermediate |
| 25 | How do you properly implement email verification and password reset functionality using Firebase Authentication's built in features? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 26 | How would you implement mutual TLS (mTLS) authentication in ASP.NET Core, where the server also validates a client-presented certificate? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 27 | What is Multi-Factor Authentication (MFA), and how would you implement Time-based One-Time Password (TOTP) support in a Node.js app? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 28 | What are best practices for securely storing and validating authentication tokens in a Next.js app? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 29 | What security settings should always be applied to cookies that store session or authentication information? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Advanced |
| 30 | How does linking multiple different authentication providers to a single Firebase user account work, letting a user sign in using either Google or email and password while still resolving to the exact same underlying account? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Advanced |
| 31 | How can custom claims in Firebase Authentication be used to implement role based access control, such as distinguishing between a regular user and an administrator within your app? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Advanced |
| 32 | Why should you avoid storing sensitive information, like an authentication token, directly in an Angular app's local storage? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Beginner |
| 33 | What is the difference between Windows Authentication and SQL Server Authentication? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Beginner |
| 34 | What are the security risks of storing JWTs in browser localStorage versus HttpOnly cookies? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 35 | What are the security considerations when configuring authentication for a linked server connection? SQL Server › Linked Servers | SQL Server | Linked Servers | Intermediate |
| 36 | What security considerations are important when storing sensitive session data in Redis, such as authentication tokens? Redis › Session Management with Redis | Redis | Session Management with Redis | Advanced |
| 37 | What are the security and architectural considerations of using stateless, token based authentication such as JWT instead of traditional server side sessions for an API? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Advanced |
| 38 | How does Symfony's security component handle authentication and authorization, including the concept of voters for fine grained access control decisions? PHP › Symfony Framework Essentials | PHP | Symfony Framework Essentials | Advanced |
| 39 | What is a JSON Web Token (JWT), and what are its three parts? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 40 | How do you implement JWT refresh token rotation in a Node.js API, and why is it more secure than a single long-lived token? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 41 | How does the OAuth 2.0 Authorization Code flow work, and what role does Node.js typically play as the client or the resource server? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 42 | How should passwords be securely stored in a Node.js application's database, and why is bcrypt commonly used? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 43 | Why should sensitive information, such as an API key or a secret token, never be hardcoded directly within a Flutter app's actual source code? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Beginner |
| 44 | What is Role-Based Access Control (RBAC), and how would you implement it as Express middleware? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 45 | What is CSRF (Cross-Site Request Forgery), and how do you protect a Node.js session-based application against it? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 46 | How do you implement email verification and password-reset flows securely in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 47 | How would you implement Attribute-Based Access Control (ABAC) in a Node.js application when RBAC roles aren't expressive enough? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 48 | How would you implement 'Sign in with GitHub' using Passport's OAuth strategy in an Express application? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 49 | How do you validate a JWT's claims (issuer, audience, expiration) beyond just verifying its cryptographic signature? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 50 | How do Firestore security rules control which users are allowed to read or write specific pieces of data, and why is relying only on client side validation within the Flutter app itself never sufficient? Flutter › Cloud Firestore & Firebase Storage | Flutter | Cloud Firestore & Firebase Storage | Intermediate |
| 51 | How do you properly implement Google sign in specifically within a Flutter app, and what additional setup steps beyond simply configuring Firebase itself does this particular sign in method actually require? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 52 | Why should genuinely sensitive data, such as an authentication token or a password, never actually be stored using regular SharedPreferences, and what should genuinely be used instead? Flutter › Local Data Storage with SharedPreferences | Flutter | Local Data Storage with SharedPreferences | Intermediate |
| 53 | How do you implement authentication token refresh transparently for API calls? .NET MAUI › Networking & APIs | .NET MAUI | Networking & APIs | Advanced |
| 54 | How do you implement authentication token refresh transparently for API calls? .NET MAUI › Networking & APIs | .NET MAUI | Networking & APIs | Advanced |
| 55 | How does Java's String immutability, combined with the string pool, interact with security-sensitive code (like handling passwords), and why is char[] generally recommended over String for storing sensitive data temporarily in memory? Java › Java Fundamentals: Syntax, Data Types & Operators | Java | Java Fundamentals: Syntax, Data Types & Operators | Advanced |
| 56 | What is the principle of least privilege, and how does it apply to designing an authorization system for a multi-tenant Node.js SaaS application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 57 | How would you implement authentication and authorization in a GraphQL API in Node.js, given there's typically only a single HTTP endpoint? Node.js › GraphQL | Node.js | GraphQL | Advanced |
| 58 | What is token introspection, and when is it needed instead of simply verifying a JWT's signature locally? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 59 | What is PKCE (Proof Key for Code Exchange), and why is it now recommended for OAuth flows even in traditional server-side Node.js applications? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 60 | How would you implement authentication and authorization in a GraphQL API, given all requests typically go through a single endpoint? Node.js › GraphQL with Node.js | Node.js | GraphQL with Node.js | Advanced |
| 61 | How do you implement role based authorization, where different users see different content based on their role? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 62 | What security considerations are unique to server actions compared to regular server side code, since they can be called directly from the browser? Next.js › Server Actions & Mutations | Next.js | Server Actions & Mutations | Advanced |
| 63 | What security risk does dynamically reflecting the Origin header back as Access-Control-Allow-Origin introduce, and why is it a dangerous anti-pattern? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 64 | How do you implement service-to-service authentication in a Node.js microservices architecture, so internal services can trust requests from each other? Node.js › Microservices Architecture with Node.js | Node.js | Microservices Architecture with Node.js | Intermediate |
| 65 | How does mutual TLS authentication differ from standard one way TLS, and why would you enable it for Redis? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Intermediate |
| 66 | What is SMTP authentication, and why is properly configuring it important for ensuring email deliverability? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Intermediate |
| 67 | How do SPF, DKIM, and DMARC email authentication records help improve email deliverability and prevent your domain from being used for email spoofing? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Intermediate |
| 68 | How does authentication typically work for a RESTful API, and what is the difference between session based authentication and token based authentication using something like a JSON Web Token? PHP › RESTful API Development with PHP | PHP | RESTful API Development with PHP | Intermediate |
| 69 | What security risks does an overly permissive CORS policy (like AllowAnyOrigin with credentials attempted, or reflecting the Origin header) introduce? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 70 | How does middleware priority and ordering affect application behavior when multiple middleware, such as authentication and rate limiting, are applied to the same route together? PHP › Routing & Middleware | PHP | Routing & Middleware | Advanced |
| 71 | How should you properly implement request and response logging for debugging purposes, while genuinely and carefully ensuring genuinely sensitive data, such as an authentication token or a password, is never actually accidentally logged in plain readable text? Flutter › Networking with HTTP & Dio | Flutter | Networking with HTTP & Dio | Advanced |
| 72 | What is the difference between CORS and CSRF protection, and why doesn't a strict CORS policy alone fully protect a cookie-authenticated endpoint? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 73 | What does the node:crypto module provide, and what's the difference between hashing and encryption? Node.js › Core Node.js Modules | Node.js | Core Node.js Modules | Intermediate |
| 74 | What is an unsubscribe mechanism, and what specific requirements does it need to meet for compliance with regulations like CAN-SPAM? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 75 | How do you set a cookie in Next.js, such as after a user logs in? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Intermediate |
| 76 | How should a Flutter app properly handle a deep link that points to a specific screen requiring the user to first be authenticated, if that user is not actually currently logged in yet? Flutter › Deep Linking in Flutter | Flutter | Deep Linking in Flutter | Intermediate |
| 77 | How do you properly implement encryption for a Hive box specifically to properly protect genuinely sensitive data stored directly on a user's own device from being easily read by another potentially malicious app? Flutter › Hive & NoSQL Local Storage | Flutter | Hive & NoSQL Local Storage | Intermediate |