| 1 | What is authentication in ASP.NET Core, and how does the framework represent an authenticated user? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Beginner |
| 2 | How does cookie-based authentication work in ASP.NET Core, and when is it preferred over token-based authentication? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 3 | How do you configure ASP.NET Core to support multiple authentication schemes simultaneously, such as both cookies for a web UI and JWT for an API? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 4 | How does two-factor authentication (2FA) work with ASP.NET Core Identity, and what does the sign-in flow look like? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 5 | What is the purpose of the authentication middleware's position in the pipeline, and why must UseAuthentication come before UseAuthorization? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 6 | How do claims transformations (IClaimsTransformation) let you augment a user's claims after initial authentication but before authorization checks run? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 7 | What is the difference between IAuthenticationService's SignInAsync/SignOutAsync methods and simply checking if a user 'is authenticated'? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 8 | How does JWT bearer authentication validate an incoming token, and what claims does TokenValidationParameters check? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 9 | How do external identity provider integrations (like Google or Microsoft Entra ID) work using OAuth/OpenID Connect authentication handlers? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 10 | How do you implement API key authentication as a custom authentication scheme for machine-to-machine API access? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 11 | How does Windows Authentication (Negotiate/Kerberos) work in ASP.NET Core for intranet applications, and when is it appropriate? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 12 | How would you implement passwordless authentication (like a magic link sent via email) in ASP.NET Core? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 13 | How do you store authentication tokens securely in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Beginner |
| 14 | How do you store authentication tokens securely in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Beginner |
| 15 | What is the difference between authentication and authorization in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 16 | How do you add biometric authentication (fingerprint/Face ID)? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 17 | How do you add biometric authentication (fingerprint/Face ID)? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 18 | How does session-based authentication work in a Node.js/Express application, and what does the session store need to handle? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 19 | What is Passport.js, and how do its 'strategies' provide a consistent authentication abstraction across different methods? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 20 | How do authentication and authorization work together in a .NET application, and how would you implement both role-based and policy-based access control? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 21 | What is the difference between authentication and authorization in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Beginner |
| 22 | What is the difference between storing an authentication token in localStorage versus an httpOnly cookie, from a security perspective? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 23 | What is the difference between authentication and authorization in a Next.js application? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Beginner |
| 24 | What is Firebase Authentication, and what different sign in methods does it support out of the box for a Flutter app? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Beginner |
| 25 | How do you listen for authentication state changes in Firebase Authentication, letting your Flutter app automatically know whenever a user actually signs in or signs out? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Beginner |
| 26 | How does JWT (JSON Web Token) authentication work at a high level in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 27 | How do JWTs, OAuth, and Passport.js fit together in a typical Node.js authentication architecture? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 28 | How can you use middleware to protect multiple routes at once for authentication? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Intermediate |
| 29 | How do you properly implement email verification and password reset functionality using Firebase Authentication's built in features? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 30 | How does Firebase Authentication integrate together with Firestore security rules to properly control exactly which specific data a given authenticated user is actually allowed to access? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 31 | How does ASP.NET Core support multiple authentication schemes simultaneously (e.g., cookies for a web UI and JWT for an API in the same application)? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 32 | What is Multi-Factor Authentication (MFA), and how would you implement Time-based One-Time Password (TOTP) support in a Node.js app? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 33 | How would you implement API key authentication for a Node.js service consumed by other backend services, and what are its security limitations? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 34 | What are best practices for securely storing and validating authentication tokens in a Next.js app? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 35 | How does linking multiple different authentication providers to a single Firebase user account work, letting a user sign in using either Google or email and password while still resolving to the exact same underlying account? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Advanced |
| 36 | How can custom claims in Firebase Authentication be used to implement role based access control, such as distinguishing between a regular user and an administrator within your app? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Advanced |
| 37 | How does the flutter_secure_storage package let you securely store sensitive data, such as an authentication token, on a user's device using each platform's own native secure storage mechanism? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Beginner |
| 38 | How does authentication state flow from ASP.NET Core's cookie/JWT authentication into a Blazor component via AuthenticationStateProvider? ASP.NET Core › Blazor Integration with ASP.NET Core | ASP.NET Core | Blazor Integration with ASP.NET Core | Intermediate |
| 39 | Why should you avoid storing sensitive information, like an authentication token, directly in your React app's regular JavaScript state or a global variable? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Intermediate |
| 40 | Why should genuinely sensitive data, such as an authentication token or a password, never actually be stored using regular SharedPreferences, and what should genuinely be used instead? Flutter › Local Data Storage with SharedPreferences | Flutter | Local Data Storage with SharedPreferences | Intermediate |
| 41 | How do Dio interceptors let you centrally add a shared authentication header to every single outgoing request, or centrally handle a genuine expired token error consistently across your entire app? Flutter › Networking with HTTP & Dio | Flutter | Networking with HTTP & Dio | Intermediate |
| 42 | How do BLoC to BLoC communication patterns work, letting one given BLoC properly react to a genuinely separate other BLoC's own emitted state changes, such as a cart BLoC properly reacting whenever a genuinely separate authentication BLoC's own state actually changes? Flutter › State Management with BLoC & Cubit | Flutter | State Management with BLoC & Cubit | Intermediate |
| 43 | How do you implement authentication token refresh transparently for API calls? .NET MAUI › Networking & APIs | .NET MAUI | Networking & APIs | Advanced |
| 44 | How do you implement authentication token refresh transparently for API calls? .NET MAUI › Networking & APIs | .NET MAUI | Networking & APIs | Advanced |
| 45 | How does gRPC support interceptors for cross-cutting concerns like authentication, logging, and retries, similar to middleware in a REST pipeline? .NET › gRPC Services | .NET | gRPC Services | Advanced |
| 46 | How do you handle authentication for gRPC calls, and how does it differ from typical REST API authentication patterns? .NET › gRPC Services | .NET | gRPC Services | Advanced |
| 47 | How do you document authentication requirements (like a JWT bearer token) in Swagger UI so users can test authenticated endpoints interactively? ASP.NET Core › API Documentation with Swagger/OpenAPI | ASP.NET Core | API Documentation with Swagger/OpenAPI | Advanced |
| 48 | How do you implement authentication and authorization for gRPC services in ASP.NET Core, given gRPC calls don't carry cookies the way browser requests typically do? ASP.NET Core › gRPC Services | ASP.NET Core | gRPC Services | Advanced |
| 49 | How would you implement mutual TLS (mTLS) authentication in ASP.NET Core, where the server also validates a client-presented certificate? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 50 | How would you implement authentication and authorization in a GraphQL API in Node.js, given there's typically only a single HTTP endpoint? Node.js › GraphQL | Node.js | GraphQL | Advanced |
| 51 | How would you implement authentication and authorization in a GraphQL API, given all requests typically go through a single endpoint? Node.js › GraphQL with Node.js | Node.js | GraphQL with Node.js | Advanced |
| 52 | What security settings should always be applied to cookies that store session or authentication information? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Advanced |
| 53 | How do biometric authentication methods, such as fingerprint or face recognition, add an additional meaningful layer of security to a sensitive Flutter app, and how does the local_auth package help implement this feature? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Advanced |
| 54 | How can you properly implement route guards using go_router's own redirect functionality to properly control access to specific protected routes based on a user's own current genuine authentication state? Flutter › Named Routes & Navigator 2.0 (Router API) | Flutter | Named Routes & Navigator 2.0 (Router API) | Advanced |
| 55 | Why should you avoid storing sensitive information, like an authentication token, directly in an Angular app's local storage? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Beginner |
| 56 | What is the difference between Windows Authentication and SQL Server Authentication? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Beginner |
| 57 | How do you set a password to require authentication before clients can execute commands on a Redis instance? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Beginner |
| 58 | How do you configure authentication credentials for the AWS CLI to securely access your AWS account? AWS › AWS CLI & SDKs | AWS | AWS CLI & SDKs | Beginner |
| 59 | How does ArgoCD integrate with SSO for authentication? ArgoCD › RBAC | ArgoCD | RBAC | Intermediate |
| 60 | How do you apply a global authorization policy requiring authentication by default for every endpoint, with explicit opt-out for public ones? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 61 | How would you exclude health check endpoints from other cross-cutting middleware like authentication, logging, or rate limiting that shouldn't apply to frequent automated health polling? ASP.NET Core › Health Checks | ASP.NET Core | Health Checks | Intermediate |
| 62 | How do you implement service-to-service authentication in a Node.js microservices architecture, so internal services can trust requests from each other? Node.js › Microservices Architecture with Node.js | Node.js | Microservices Architecture with Node.js | Intermediate |
| 63 | How would you use a higher order component to add authentication protection to a page? React › Higher-Order Components (HOCs) | React | Higher-Order Components (HOCs) | Intermediate |
| 64 | What are the security considerations when configuring authentication for a linked server connection? SQL Server › Linked Servers | SQL Server | Linked Servers | Intermediate |
| 65 | How does mutual TLS authentication differ from standard one way TLS, and why would you enable it for Redis? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Intermediate |
| 66 | How does API Gateway handle authentication and authorization for incoming requests? AWS › Amazon API Gateway | AWS | Amazon API Gateway | Intermediate |
| 67 | How does EKS integrate with IAM for authentication and authorization within a Kubernetes cluster? AWS › Amazon EKS (Elastic Kubernetes Service) | AWS | Amazon EKS (Elastic Kubernetes Service) | Intermediate |
| 68 | What is SMTP authentication, and why is properly configuring it important for ensuring email deliverability? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Intermediate |
| 69 | How do SPF, DKIM, and DMARC email authentication records help improve email deliverability and prevent your domain from being used for email spoofing? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Intermediate |
| 70 | How does authentication typically work for a RESTful API, and what is the difference between session based authentication and token based authentication using something like a JSON Web Token? PHP › RESTful API Development with PHP | PHP | RESTful API Development with PHP | Intermediate |
| 71 | How would you use the Chain of Responsibility pattern to implement a request-processing pipeline (such as middleware-style validation/authentication/logging), and how does this relate conceptually to servlet filters or web framework middleware? Java › Design Patterns in Java | Java | Design Patterns in Java | Advanced |
| 72 | How would you combine multiple route guards together to enforce both authentication and a specific user role? Angular › Router Guards & Resolvers | Angular | Router Guards & Resolvers | Advanced |
| 73 | What security considerations are important when storing sensitive session data in Redis, such as authentication tokens? Redis › Session Management with Redis | Redis | Session Management with Redis | Advanced |
| 74 | How does middleware priority and ordering affect application behavior when multiple middleware, such as authentication and rate limiting, are applied to the same route together? PHP › Routing & Middleware | PHP | Routing & Middleware | Advanced |
| 75 | What are the security and architectural considerations of using stateless, token based authentication such as JWT instead of traditional server side sessions for an API? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Advanced |
| 76 | How does Symfony's security component handle authentication and authorization, including the concept of voters for fine grained access control decisions? PHP › Symfony Framework Essentials | PHP | Symfony Framework Essentials | Advanced |
| 77 | How should you properly implement request and response logging for debugging purposes, while genuinely and carefully ensuring genuinely sensitive data, such as an authentication token or a password, is never actually accidentally logged in plain readable text? Flutter › Networking with HTTP & Dio | Flutter | Networking with HTTP & Dio | Advanced |
| 78 | What is ASP.NET Core Identity, and how does it provide a complete user account management system? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Intermediate |
| 79 | How do refresh tokens work alongside short-lived JWT access tokens, and how would you implement a refresh endpoint? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 80 | How would you implement sign-out that properly invalidates both a cookie session and any associated server-side state? ASP.NET Core › Authentication | ASP.NET Core | Authentication | Advanced |
| 81 | How do you implement OAuth/OpenID Connect login in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 82 | How do you enforce SSL/certificate pinning in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 83 | How do you implement OAuth/OpenID Connect login in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 84 | How do you enforce SSL/certificate pinning in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 85 | What is ASP.NET Core Identity, and what does it provide out of the box? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 86 | How do you implement role-based authorization using the [Authorize(Roles = "...")] attribute? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 87 | How do refresh tokens work alongside short-lived access tokens, and why is this pattern used? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 88 | What is the OAuth 2.0 Client Credentials flow, and when is it used instead of the Authorization Code flow? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 89 | What is the purpose of the 'scope' parameter in OAuth 2.0, and how does it implement the principle of least privilege? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 90 | What is a JSON Web Token (JWT), and what are its three parts? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 91 | What are key security best practices for a production MAUI app? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 92 | How do you protect API keys and secrets that the app needs? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 93 | What are key security best practices for a production MAUI app? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 94 | How do you protect API keys and secrets that the app needs? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 95 | What are JWT claims, and how do you add custom claims when issuing a token? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 96 | How does the OAuth 2.0 Authorization Code flow work, and why is it preferred over the deprecated Implicit flow for web applications? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 97 | How do you implement policy-based authorization for more complex, custom access rules beyond simple roles? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 98 | How does token revocation work with stateless JWTs, given they can't simply be 'deleted' server-side once issued? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 99 | How do you integrate external identity providers (Google, Microsoft Entra ID, Facebook) using OAuth/OpenID Connect in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 100 | How does token validation work under the hood when the JwtBearer middleware receives a request, and what checks does it perform? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 101 | How do you implement JWT refresh token rotation in a Node.js API, and why is it more secure than a single long-lived token? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 102 | How does the OAuth 2.0 Authorization Code flow work, and what role does Node.js typically play as the client or the resource server? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 103 | How should passwords be securely stored in a Node.js application's database, and why is bcrypt commonly used? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 104 | What are the security risks of storing JWTs in browser localStorage versus HttpOnly cookies? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 105 | What is Role-Based Access Control (RBAC), and how would you implement it as Express middleware? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 106 | What is CSRF (Cross-Site Request Forgery), and how do you protect a Node.js session-based application against it? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 107 | How do you implement email verification and password-reset flows securely in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 108 | How would you implement Attribute-Based Access Control (ABAC) in a Node.js application when RBAC roles aren't expressive enough? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 109 | How would you implement 'Sign in with GitHub' using Passport's OAuth strategy in an Express application? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 110 | How do you validate a JWT's claims (issuer, audience, expiration) beyond just verifying its cryptographic signature? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 111 | How would you protect a page in the App Router so only logged in users can access it? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Intermediate |
| 112 | How do you properly implement Google sign in specifically within a Flutter app, and what additional setup steps beyond simply configuring Firebase itself does this particular sign in method actually require? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 113 | What is the principle of least privilege, and how does it apply to designing an authorization system for a multi-tenant Node.js SaaS application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 114 | What is token introspection, and when is it needed instead of simply verifying a JWT's signature locally? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 115 | What is PKCE (Proof Key for Code Exchange), and why is it now recommended for OAuth flows even in traditional server-side Node.js applications? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 116 | How do you implement role based authorization, where different users see different content based on their role? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 117 | What is the difference between role-based and claims-based authorization in ASP.NET Core? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Beginner |
| 118 | What is CORS, and why does an ASP.NET Core API need to explicitly configure it for browser-based clients on a different origin? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Beginner |
| 119 | How would you add custom HTTP headers (like an Authorization bearer token) to an outgoing request using HttpRequest.Builder? Java › Java Networking & HTTP Client | Java | Java Networking & HTTP Client | Beginner |
| 120 | What is a route guard in Angular, and what is it commonly used for? Angular › Router Guards & Resolvers | Angular | Router Guards & Resolvers | Beginner |
| 121 | How do you read cookies in a Next.js server component? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Beginner |
| 122 | How do you limit which routes your middleware actually applies to? Next.js › Middleware | Next.js | Middleware | Beginner |
| 123 | What is Cloud Firestore, and how does it let a Flutter app store and sync structured data in real time without needing to build a custom backend server? Flutter › Cloud Firestore & Firebase Storage | Flutter | Cloud Firestore & Firebase Storage | Beginner |
| 124 | What is Firebase Storage, and how does it complement Cloud Firestore by specifically handling the storage of larger files, such as images and videos? Flutter › Cloud Firestore & Firebase Storage | Flutter | Cloud Firestore & Firebase Storage | Beginner |
| 125 | Why should sensitive information, such as an API key or a secret token, never be hardcoded directly within a Flutter app's actual source code? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Beginner |
| 126 | What is Dio, and what genuinely additional features does it provide beyond the more basic http package, such as built in interceptors and considerably more convenient error handling? Flutter › Networking with HTTP & Dio | Flutter | Networking with HTTP & Dio | Beginner |
| 127 | What is Firebase Cloud Messaging, and how does it let you actually send genuine push notifications to a Flutter app running on a user's own device? Flutter › Push Notifications in Flutter (FCM) | Flutter | Push Notifications in Flutter (FCM) | Beginner |
| 128 | Why does the order in which middleware is registered matter so much in ASP.NET Core? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Intermediate |
| 129 | How do you conditionally apply middleware only to certain requests using UseWhen or MapWhen? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Intermediate |
| 130 | How does dependency injection work in Blazor components, and what's the difference between @inject and constructor injection? .NET › Blazor (Server & WebAssembly) | .NET | Blazor (Server & WebAssembly) | Intermediate |
| 131 | What is the difference between absolute expiration and sliding expiration when configuring a cache entry? .NET › Caching (In-Memory, Distributed & Redis) | .NET | Caching (In-Memory, Distributed & Redis) | Intermediate |
| 132 | What are the risks of caching sensitive or user-specific data, and how do you avoid cache poisoning across users? .NET › Caching (In-Memory, Distributed & Redis) | .NET | Caching (In-Memory, Distributed & Redis) | Intermediate |
| 133 | How do you configure a CORS policy in ASP.NET Core to allow requests from specific origins? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 134 | What does AllowCredentials() do in a CORS policy, and why can't it be combined with a wildcard origin? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 135 | Why must UseCors be positioned after UseRouting but before UseAuthorization in the ASP.NET Core middleware pipeline? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 136 | What is the difference between CORS and CSRF (Cross-Site Request Forgery), and how does CORS relate to (but not fully prevent) CSRF? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Intermediate |
| 137 | How do you register a service using a factory delegate instead of a simple type mapping, when construction requires custom logic? .NET › Dependency Injection | .NET | Dependency Injection | Intermediate |
| 138 | Why is it recommended to run a containerized .NET application as a non-root user, and how do you configure this in a Dockerfile? .NET › Docker & Containerization | .NET | Docker & Containerization | Intermediate |
| 139 | How do you define and apply policy-based authorization for requirements more complex than a simple role or claim check? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 140 | What is the difference between AuthorizeAttribute's behavior returning 401 versus 403, and what determines which one a client receives? ASP.NET Core › Authorization | ASP.NET Core | Authorization | Intermediate |
| 141 | How do you mix Blazor components with traditional MVC controllers and Razor Pages within the same ASP.NET Core application? ASP.NET Core › Blazor Integration with ASP.NET Core | ASP.NET Core | Blazor Integration with ASP.NET Core | Intermediate |
| 142 | What is the risk of caching sensitive or user-specific data with an incorrectly scoped cache key, and how do you prevent cross-user data leakage? ASP.NET Core › Caching | ASP.NET Core | Caching | Intermediate |
| 143 | How do you configure a cache entry's absolute versus sliding expiration, and when would you combine both? ASP.NET Core › Caching | ASP.NET Core | Caching | Intermediate |
| 144 | Why can't AllowCredentials() be combined with a wildcard origin (AllowAnyOrigin), and what does this mean for cookie-authenticated cross-origin APIs? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 145 | What security risk does dynamically reflecting the Origin header back as Access-Control-Allow-Origin introduce, and why is it a dangerous anti-pattern? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 146 | What is the difference between CORS and CSRF protection, and why doesn't a strict CORS policy alone fully protect a cookie-authenticated endpoint? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 147 | How do you register a service using a factory delegate instead of a simple type mapping, when construction requires reading configuration or resolving other services conditionally? ASP.NET Core › Dependency Injection | ASP.NET Core | Dependency Injection | Intermediate |
| 148 | How can filters access route values, query string parameters, or the raw HttpContext during execution? ASP.NET Core › Filters | ASP.NET Core | Filters | Intermediate |
| 149 | How would you send URL-encoded form data (application/x-www-form-urlencoded) using HttpClient, as opposed to a JSON request body? Java › Java Networking & HTTP Client | Java | Java Networking & HTTP Client | Intermediate |
| 150 | What is middleware in ASP.NET Core, and how does the order in which it's registered affect request handling? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Intermediate |
| 151 | What does the node:crypto module provide, and what's the difference between hashing and encryption? Node.js › Core Node.js Modules | Node.js | Core Node.js Modules | Intermediate |
| 152 | What is an unsubscribe mechanism, and what specific requirements does it need to meet for compliance with regulations like CAN-SPAM? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 153 | What is the difference between sending SMS via a provider's REST API (like Twilio) versus using SMTP-based email in terms of a Node.js integration? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 154 | What is an API Gateway, and what role does it play in front of a collection of Node.js microservices? Node.js › Microservices Architecture with Node.js | Node.js | Microservices Architecture with Node.js | Intermediate |
| 155 | How can you protect an API route so that only authenticated users can access it? Next.js › API Routes | Next.js | API Routes | Intermediate |
| 156 | How do you set a cookie in Next.js, such as after a user logs in? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Intermediate |
| 157 | How would you implement a simple session management system using cookies in Next.js? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Intermediate |
| 158 | How do you secure the route that enables Draft Mode so random visitors cannot use it? Next.js › Draft Mode & Preview Mode | Next.js | Draft Mode & Preview Mode | Intermediate |
| 159 | How would you conditionally redirect users based on something dynamic, like whether they are logged in, rather than a fixed rule in next.config.js? Next.js › Redirects & Rewrites Configuration | Next.js | Redirects & Rewrites Configuration | Intermediate |
| 160 | How do you programmatically navigate to a different page in response to a user action, such as after a successful form submission? Next.js › Routing (App/Pages Router) | Next.js | Routing (App/Pages Router) | Intermediate |
| 161 | How do Firestore security rules control which users are allowed to read or write specific pieces of data, and why is relying only on client side validation within the Flutter app itself never sufficient? Flutter › Cloud Firestore & Firebase Storage | Flutter | Cloud Firestore & Firebase Storage | Intermediate |
| 162 | How should a Flutter app properly handle a deep link that points to a specific screen requiring the user to first be authenticated, if that user is not actually currently logged in yet? Flutter › Deep Linking in Flutter | Flutter | Deep Linking in Flutter | Intermediate |
| 163 | How do you properly implement encryption for a Hive box specifically to properly protect genuinely sensitive data stored directly on a user's own device from being easily read by another potentially malicious app? Flutter › Hive & NoSQL Local Storage | Flutter | Hive & NoSQL Local Storage | Intermediate |
| 164 | What is the difference between Navigator.push, Navigator.pushReplacement, and Navigator.pushAndRemoveUntil, and when would you genuinely reach for each individual one of these three particular methods? Flutter › Navigation & Routing in Flutter | Flutter | Navigation & Routing in Flutter | Intermediate |
| 165 | How do you properly implement topic based messaging in FCM, letting you send a genuinely single targeted notification to every single device that has actually genuinely subscribed to a specific particular topic? Flutter › Push Notifications in Flutter (FCM) | Flutter | Push Notifications in Flutter (FCM) | Intermediate |
| 166 | How does ProxyProvider let you properly create a given provider whose own value genuinely depends on the current value of a completely separate other already existing provider? Flutter › State Management with Provider | Flutter | State Management with Provider | Intermediate |
| 167 | How does UseRouting and endpoint routing (via MapControllers, MapGet, etc.) fit into the middleware pipeline conceptually? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Advanced |
| 168 | What is the recommended standard order for common middleware in a typical ASP.NET Core Web API pipeline, and why? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Advanced |
| 169 | Why is it dangerous to capture and store an HttpContext reference in a singleton-scoped service, and what should you use instead? .NET › ASP.NET Core Middleware & Request Pipeline | .NET | ASP.NET Core Middleware & Request Pipeline | Advanced |
| 170 | How do you apply different CORS policies to different endpoints or controllers within the same application? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 171 | What security risks does an overly permissive CORS policy (like AllowAnyOrigin with credentials attempted, or reflecting the Origin header) introduce? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 172 | How does CORS behave differently for requests made from a mobile app or server-to-server call compared to a browser-based web app? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 173 | What information should be excluded from error responses in production to avoid leaking sensitive implementation details? .NET › Global Exception Handling & Middleware | .NET | Global Exception Handling & Middleware | Advanced |
| 174 | How do you apply different CORS policies to different controllers or minimal API endpoint groups within the same application? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Advanced |
| 175 | How would you configure CORS to allow any subdomain of a known domain (like *.mycompany.com) using SetIsOriginAllowed with custom matching logic? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Advanced |
| 176 | What information should be excluded from error responses in production to avoid leaking sensitive implementation details? ASP.NET Core › Error Handling | ASP.NET Core | Error Handling | Advanced |
| 177 | How would you write an IAuthorizationFilter or custom authorization logic as a filter, and how does it differ from the standard [Authorize] attribute/policy system? ASP.NET Core › Filters | ASP.NET Core | Filters | Advanced |
| 178 | How does Java's String immutability, combined with the string pool, interact with security-sensitive code (like handling passwords), and why is char[] generally recommended over String for storing sensitive data temporarily in memory? Java › Java Fundamentals: Syntax, Data Types & Operators | Java | Java Fundamentals: Syntax, Data Types & Operators | Advanced |
| 179 | What is horizontal scaling for a Node.js application, and what specific architectural requirement does it impose? Node.js › Cloud & DevOps | Node.js | Cloud & DevOps | Advanced |
| 180 | How would you protect certain routes so only logged in users can access them? React › Routing | React | Routing | Advanced |
| 181 | What security considerations are unique to server actions compared to regular server side code, since they can be called directly from the browser? Next.js › Server Actions & Mutations | Next.js | Server Actions & Mutations | Advanced |
| 182 | How can scoped dependency injection help properly manage the specific lifecycle of dependencies that should genuinely only exist for the duration of a particular feature or a specific user session, rather than living for the entire lifetime of the whole application? Flutter › Dependency Injection in Flutter (GetIt & Service Locator) | Flutter | Dependency Injection in Flutter (GetIt & Service Locator) | Advanced |
| 183 | How should a Flutter app properly detect whether it is currently running on a rooted Android device or a jailbroken iOS device, and what genuine security risks does running on such a compromised device actually introduce? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Advanced |
| 184 | How should a subscription based app properly handle server side subscription status synchronization, ensuring a user's genuine subscription access remains fully accurate and properly up to date across several genuinely separate different devices? Flutter › In App Purchases in Flutter | Flutter | In App Purchases in Flutter | Advanced |