| 1 | What is the purpose of the helmet middleware package for an Express application, and what specific security headers does it set? Node.js › Express & Middleware | Node.js | Express & Middleware | Intermediate |
| 2 | How do you set security related HTTP headers, such as Content Security Policy, in a Next.js application? Next.js › Security Best Practices in Next.js | Next.js | Security Best Practices in Next.js | Intermediate |
| 3 | What is HSTS (HTTP Strict Transport Security), and how does UseHsts() in ASP.NET Core implement it? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 4 | What is certificate pinning, and why is it generally discouraged for typical web API scenarios despite its security benefits? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 5 | How do you enforce that all HTTP requests to an ASP.NET Core application are redirected to HTTPS? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 6 | What is the difference between a certificate's public key and private key, and why must the private key never be exposed or committed to source control? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 7 | What TLS protocol versions and cipher suites should a modern ASP.NET Core application support, and how do you configure Kestrel to enforce a minimum acceptable TLS version? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 8 | Why is it important to validate a server's TLS certificate when making outbound HttpClient calls to external services, and what's the risk of disabling certificate validation? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 9 | What is the parent delegation model in Java class loading, and why is it important for security and consistency? Java › Class Loading & Bytecode Verification | Java | Class Loading & Bytecode Verification | Intermediate |
| 10 | How would you configure a Maven or Gradle build to produce a reproducible build (bit-for-bit identical output given the same source), and why does this matter for supply chain security? Java › Build Tools: Maven & Gradle | Java | Build Tools: Maven & Gradle | Advanced |