| 1 | What is the difference between CORS and CSRF protection, and why doesn't a strict CORS policy alone fully protect a cookie-authenticated endpoint? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 2 | What is the difference between Kestrel's ListenAnyIP and Listen methods for binding to network addresses? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Beginner |
| 3 | How do you enforce that all HTTP requests to an ASP.NET Core application are redirected to HTTPS? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 4 | What is the difference between a certificate's public key and private key, and why must the private key never be exposed or committed to source control? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 5 | How do you validate an uploaded file's actual content type (not just its client-supplied extension or Content-Type header) to prevent malicious file uploads? ASP.NET Core › File Uploads & Streaming Large Files | ASP.NET Core | File Uploads & Streaming Large Files | Intermediate |
| 6 | What is the difference between temporary file storage (during processing) and permanent storage for uploaded files, and why should uploads generally not be saved directly to their final destination? ASP.NET Core › File Uploads & Streaming Large Files | ASP.NET Core | File Uploads & Streaming Large Files | Intermediate |
| 7 | Why should the detailed /health endpoint (with full dependency status breakdown) generally not be exposed publicly on the internet, and how do you restrict access to it? ASP.NET Core › Health Checks | ASP.NET Core | Health Checks | Intermediate |
| 8 | How does ASP.NET Core determine the original client IP address and scheme (HTTP/HTTPS) when running behind a reverse proxy that terminates TLS and forwards requests, given the app only sees the proxy's connection? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Intermediate |
| 9 | What is HSTS (HTTP Strict Transport Security), and how does UseHsts() in ASP.NET Core implement it? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 10 | What is certificate pinning, and why is it generally discouraged for typical web API scenarios despite its security benefits? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |