| 1 | What is HSTS (HTTP Strict Transport Security), and how does UseHsts() in ASP.NET Core implement it? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 2 | What is certificate pinning, and why is it generally discouraged for typical web API scenarios despite its security benefits? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 3 | What are key security best practices for a production MAUI app? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 4 | What are key security best practices for a production MAUI app? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 5 | How do biometric authentication methods, such as fingerprint or face recognition, add an additional meaningful layer of security to a sensitive Flutter app, and how does the local_auth package help implement this feature? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Advanced |
| 6 | How should a Flutter app properly detect whether it is currently running on a rooted Android device or a jailbroken iOS device, and what genuine security risks does running on such a compromised device actually introduce? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Advanced |
| 7 | What is Amazon GuardDuty and how does it detect potential security threats within an AWS account? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Beginner |
| 8 | What is AWS Security Hub and how does it aggregate security findings from multiple sources? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Beginner |
| 9 | What is a Content Security Policy, often shortened to CSP, and how does it add another layer of protection to an Angular app? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Intermediate |
| 10 | How do you set security related HTTP headers, such as Content Security Policy, in a Next.js application? Next.js › Security Best Practices in Next.js | Next.js | Security Best Practices in Next.js | Intermediate |
| 11 | What are some general security best practices to follow when deploying Redis, beyond just setting a password? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Intermediate |
| 12 | How can Security Hub's custom insights and automated response actions help security teams prioritize and manage findings more effectively at scale? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Intermediate |
| 13 | How do you implement row level security to restrict which specific rows a user can see within a shared table, beyond simply controlling access to entire tables or columns? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Advanced |
| 14 | How would you design a comprehensive security auditing strategy to track who accessed or modified sensitive data in a SQL Server database? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Advanced |
| 15 | How can an organization enable GuardDuty and Security Hub consistently across every account in an AWS Organization using delegated administration? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Advanced |
| 16 | How should a security team design an end to end incident response workflow that integrates GuardDuty, Security Hub, EventBridge, and Step Functions for both automated triage and human escalation? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Advanced |
| 17 | What is the difference between storing an authentication token in localStorage versus an httpOnly cookie, from a security perspective? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 18 | How do Blade and Twig automatically escape output by default, and why is this an important security feature? PHP › Template Engines (Blade & Twig) | PHP | Template Engines (Blade & Twig) | Beginner |
| 19 | What is the parent delegation model in Java class loading, and why is it important for security and consistency? Java › Class Loading & Bytecode Verification | Java | Class Loading & Bytecode Verification | Intermediate |
| 20 | What is the purpose of the helmet middleware package for an Express application, and what specific security headers does it set? Node.js › Express & Middleware | Node.js | Express & Middleware | Intermediate |
| 21 | What are the security considerations when configuring authentication for a linked server connection? SQL Server › Linked Servers | SQL Server | Linked Servers | Intermediate |
| 22 | What security considerations should be kept in mind when configuring the account that SQL Server Agent jobs run under? SQL Server › SQL Server Agent & Job Scheduling | SQL Server | SQL Server Agent & Job Scheduling | Intermediate |
| 23 | What is the difference between using EXEC and calling a stored procedure through parameterized application code, and why does this distinction matter for security? SQL Server › Stored Procedures & Functions | SQL Server | Stored Procedures & Functions | Intermediate |
| 24 | How do you use a view to help enforce a basic level of security by limiting which columns or rows different groups of users can see? SQL Server › Views | SQL Server | Views | Intermediate |
| 25 | How does automatic key rotation work in KMS, and why is it a recommended security practice? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Intermediate |
| 26 | How do Trusted Advisor's security checks help identify common misconfigurations before they become serious security incidents? AWS › AWS Trusted Advisor | AWS | AWS Trusted Advisor | Intermediate |
| 27 | How does ECR image scanning help identify security vulnerabilities within container images before they are deployed? AWS › Elastic Container Registry (ECR) | AWS | Elastic Container Registry (ECR) | Intermediate |
| 28 | How do security groups and network ACLs differ in how they control traffic to and from resources within a VPC? AWS › VPC & Networking | AWS | VPC & Networking | Intermediate |
| 29 | How do you safely retrieve values from superglobals like $_GET or $_POST to avoid undefined index errors and potential security issues? PHP › Constants & Superglobals | PHP | Constants & Superglobals | Intermediate |
| 30 | How should you validate an uploaded file's type and size before accepting it, and why is checking only the file extension considered insufficient for security? PHP › File Upload Handling | PHP | File Upload Handling | Intermediate |
| 31 | How should uploaded file names be sanitized and randomized to avoid security risks and naming conflicts when storing files on the server? PHP › File Upload Handling | PHP | File Upload Handling | Intermediate |
| 32 | How does Psalm's concept of taint analysis help detect potential security vulnerabilities like SQL injection or cross site scripting during static analysis? PHP › Static Analysis (PHPStan & Psalm) | PHP | Static Analysis (PHPStan & Psalm) | Intermediate |
| 33 | Why is protecting against XML external entity attacks, commonly abbreviated as XXE, an important security consideration when parsing XML documents that come from an untrusted or external source? PHP › XML Handling in PHP | PHP | XML Handling in PHP | Intermediate |
| 34 | How do Firestore security rules control which users are allowed to read or write specific pieces of data, and why is relying only on client side validation within the Flutter app itself never sufficient? Flutter › Cloud Firestore & Firebase Storage | Flutter | Cloud Firestore & Firebase Storage | Intermediate |
| 35 | How does Firebase Authentication integrate together with Firestore security rules to properly control exactly which specific data a given authenticated user is actually allowed to access? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 36 | Why is properly verifying a genuine purchase receipt on your own trusted backend server considered an important security best practice, rather than simply trusting the client side purchase confirmation alone? Flutter › In App Purchases in Flutter | Flutter | In App Purchases in Flutter | Intermediate |
| 37 | How would you configure a Maven or Gradle build to produce a reproducible build (bit-for-bit identical output given the same source), and why does this matter for supply chain security? Java › Build Tools: Maven & Gradle | Java | Build Tools: Maven & Gradle | Advanced |
| 38 | Why has Java's built-in serialization (ObjectInputStream.readObject()) been widely criticized as a security risk, and what specific attack does deserializing untrusted data enable? Java › I/O & NIO | Java | I/O & NIO | Advanced |
| 39 | How does Java's String immutability, combined with the string pool, interact with security-sensitive code (like handling passwords), and why is char[] generally recommended over String for storing sensitive data temporarily in memory? Java › Java Fundamentals: Syntax, Data Types & Operators | Java | Java Fundamentals: Syntax, Data Types & Operators | Advanced |
| 40 | How would you configure HttpClient to trust a custom or self-signed SSL/TLS certificate for testing against an internal service, and what security risks does disabling certificate validation entirely introduce? Java › Java Networking & HTTP Client | Java | Java Networking & HTTP Client | Advanced |
| 41 | How would you implement API key authentication for a Node.js service consumed by other backend services, and what are its security limitations? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 42 | What is the node:vm module, and what are the security implications of using it to execute untrusted code? Node.js › Core Node.js Modules | Node.js | Core Node.js Modules | Advanced |
| 43 | What is the security risk of trusting a client-supplied filename for an uploaded file, and how do you mitigate it? Node.js › File Uploads & Media Processing | Node.js | File Uploads & Media Processing | Advanced |
| 44 | Why is it considered a security best practice to run a Node.js Docker container as a non-root user? Node.js › Docker & Containerization for Node.js | Node.js | Docker & Containerization for Node.js | Advanced |
| 45 | What is path traversal, and how does the path module (specifically path.normalize() and careful path.join() usage) help prevent it as a security vulnerability? Node.js › Path & OS Modules | Node.js | Path & OS Modules | Advanced |
| 46 | What are common performance and security pitfalls to avoid when building API routes at scale? Next.js › API Routes | Next.js | API Routes | Advanced |
| 47 | What security settings should always be applied to cookies that store session or authentication information? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Advanced |
| 48 | What security risks are associated with environment variables, and how do you avoid them? Next.js › Environment Variables & Configuration Management | Next.js | Environment Variables & Configuration Management | Advanced |
| 49 | What security considerations are unique to server actions compared to regular server side code, since they can be called directly from the browser? Next.js › Server Actions & Mutations | Next.js | Server Actions & Mutations | Advanced |
| 50 | What security considerations should you keep in mind when loading third party scripts on your Next.js website? Next.js › Third-Party Script Optimization | Next.js | Third-Party Script Optimization | Advanced |
| 51 | What security considerations are important when storing sensitive session data in Redis, such as authentication tokens? Redis › Session Management with Redis | Redis | Session Management with Redis | Advanced |
| 52 | How can Systems Manager be integrated with AWS Config and Security Hub to build a comprehensive automated compliance remediation pipeline? AWS › AWS Systems Manager | AWS | AWS Systems Manager | Advanced |
| 53 | How should an organization design a layered defense in depth strategy combining WAF, Shield, security groups, and network ACLs to protect a public facing application? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Advanced |
| 54 | How does EC2 Nitro System architecture improve performance, security, and efficiency compared to older EC2 hypervisor based virtualization? AWS › EC2 & Compute | AWS | EC2 & Compute | Advanced |
| 55 | What security risks are associated with directly trusting values from superglobals like $_SERVER, and how should applications guard against header spoofing? PHP › Constants & Superglobals | PHP | Constants & Superglobals | Advanced |
| 56 | What security considerations should be addressed when building an application feature that sends emails based on user input, such as a contact form or password reset flow? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Advanced |
| 57 | What security risks are associated with file handling operations that involve user supplied file paths, and how does path traversal attack prevention work? PHP › File Handling & File System Functions | PHP | File Handling & File System Functions | Advanced |
| 58 | What security risks arise from allowing file uploads into a publicly accessible directory, and how do you prevent uploaded files from being executed as scripts? PHP › File Upload Handling | PHP | File Upload Handling | Advanced |
| 59 | How should a complex, multi step form, such as a checkout process, handle validation and state management across multiple pages while maintaining data integrity and security? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Advanced |
| 60 | What are the security and architectural considerations of using stateless, token based authentication such as JWT instead of traditional server side sessions for an API? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Advanced |
| 61 | How does Symfony's security component handle authentication and authorization, including the concept of voters for fine grained access control decisions? PHP › Symfony Framework Essentials | PHP | Symfony Framework Essentials | Advanced |
| 62 | What is AWS CloudTrail and why is it important for security and compliance? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Beginner |
| 63 | What is Systems Manager Session Manager, and how does it improve the security of accessing EC2 instances compared to traditional SSH? AWS › AWS Systems Manager | AWS | AWS Systems Manager | Beginner |
| 64 | How does GitOps improve security and compliance? ArgoCD › GitOps Principles | ArgoCD | GitOps Principles | Intermediate |
| 65 | What are the security risks of storing JWTs in browser localStorage versus HttpOnly cookies? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 66 | What security risk does dynamically reflecting the Origin header back as Access-Control-Allow-Origin introduce, and why is it a dangerous anti-pattern? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 67 | What role does CloudFront play in protecting applications from security threats? AWS › Amazon CloudFront & Content Delivery | AWS | Amazon CloudFront & Content Delivery | Intermediate |
| 68 | How does QuickSight support row level security to control what data different users can see? AWS › Amazon QuickSight & Business Intelligence | AWS | Amazon QuickSight & Business Intelligence | Intermediate |
| 69 | How does networking and security isolation work for tasks running on Fargate? AWS › AWS Fargate | AWS | AWS Fargate | Intermediate |
| 70 | What are Service Control Policies, and how do they enforce security and compliance guardrails across an entire organization? AWS › AWS Organizations & Multi Account Strategy | AWS | AWS Organizations & Multi Account Strategy | Intermediate |
| 71 | How does automatic secret rotation work in Secrets Manager, and why is it an important security practice? AWS › AWS Secrets Manager & Parameter Store | AWS | AWS Secrets Manager & Parameter Store | Intermediate |
| 72 | How does Systems Manager Patch Manager automate the process of keeping instances up to date with the latest security patches? AWS › AWS Systems Manager | AWS | AWS Systems Manager | Intermediate |
| 73 | How does understanding the AWS shared responsibility model help clarify which security and operational tasks are AWS's responsibility versus the customer's responsibility? AWS › Core Services Overview | AWS | Core Services Overview | Intermediate |
| 74 | What are security considerations for a hub managing many clusters? ArgoCD › Multi-cluster | ArgoCD | Multi-cluster | Advanced |
| 75 | How do you audit a .NET project's dependencies for known security vulnerabilities using NuGet tooling? .NET › Assemblies & NuGet | .NET | Assemblies & NuGet | Advanced |
| 76 | What security risks does an overly permissive CORS policy (like AllowAnyOrigin with credentials attempted, or reflecting the Origin header) introduce? .NET › CORS & Cross-Origin Resource Sharing | .NET | CORS & Cross-Origin Resource Sharing | Advanced |
| 77 | What security controls are available to restrict who can publish to or subscribe from an SNS topic? AWS › Amazon SNS (Simple Notification Service) | AWS | Amazon SNS (Simple Notification Service) | Advanced |
| 78 | What security and privacy considerations should be addressed when using AI services that process sensitive text, images, or voice data? AWS › AWS AI Services (Rekognition, Polly, Lex & Comprehend) | AWS | AWS AI Services (Rekognition, Polly, Lex & Comprehend) | Advanced |
| 79 | What security best practices should be followed when running sensitive workloads on Fargate? AWS › AWS Fargate | AWS | AWS Fargate | Advanced |
| 80 | What advanced account security measures should a mature organization implement beyond the basic new account setup steps? AWS › AWS Free Tier & Account Setup | AWS | AWS Free Tier & Account Setup | Advanced |
| 81 | How should an organization design its overall account structure and governance model to balance security isolation with developer agility and operational efficiency? AWS › AWS Organizations & Multi Account Strategy | AWS | AWS Organizations & Multi Account Strategy | Advanced |
| 82 | How should an organization design its security and identity management approach for workloads running on AWS Outposts within its own data center? AWS › AWS Outposts & Hybrid Cloud | AWS | AWS Outposts & Hybrid Cloud | Advanced |
| 83 | How should an organization design a comprehensive secrets management strategy across multiple environments and AWS accounts, balancing security with operational complexity? AWS › AWS Secrets Manager & Parameter Store | AWS | AWS Secrets Manager & Parameter Store | Advanced |
| 84 | How should a team design a comprehensive PHP application deployment pipeline that incorporates automated testing, security scanning, and staged rollouts across multiple environments? PHP › Deployment & Hosting for PHP Applications | PHP | Deployment & Hosting for PHP Applications | Advanced |
| 85 | What is SQL injection, and how does using prepared statements with PDO help prevent this common vulnerability in PHP applications? PHP › Security | PHP | Security | Beginner |
| 86 | What is cross site scripting, commonly called XSS, and how does properly escaping output help prevent it? PHP › Security | PHP | Security | Beginner |
| 87 | Why should passwords always be hashed before storing them in a database, and how does PHP's password_hash function make this straightforward and secure? PHP › Security | PHP | Security | Intermediate |
| 88 | What is cross site request forgery, commonly called CSRF, and how do CSRF tokens help protect forms from this type of attack? PHP › Security | PHP | Security | Intermediate |
| 89 | Why is validating and sanitizing file uploads important, and what specific checks should you perform to prevent an attacker from uploading a malicious file? PHP › Security | PHP | Security | Intermediate |
| 90 | What is the principle of least privilege, and how should it guide decisions about database user permissions and environment configuration in a PHP application? PHP › Security | PHP | Security | Advanced |
| 91 | How can PHP's built in disabled functions setting and other server level configuration hardening reduce the impact of a successful attack against an application? PHP › Security | PHP | Security | Advanced |
| 92 | How do you store authentication tokens securely in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Beginner |
| 93 | How do you store authentication tokens securely in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Beginner |
| 94 | How do you enforce that all HTTP requests to an ASP.NET Core application are redirected to HTTPS? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 95 | What is the difference between a certificate's public key and private key, and why must the private key never be exposed or committed to source control? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 96 | How do you set a password to require authentication before clients can execute commands on a Redis instance? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Beginner |
| 97 | What is Redis ACL, and how does it provide more granular access control than a single shared password? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Beginner |
| 98 | How do you implement OAuth/OpenID Connect login in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 99 | How do you add biometric authentication (fingerprint/Face ID)? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 100 | How do you enforce SSL/certificate pinning in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 101 | How do you implement OAuth/OpenID Connect login in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 102 | How do you add biometric authentication (fingerprint/Face ID)? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 103 | How do you enforce SSL/certificate pinning in MAUI? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Intermediate |
| 104 | What TLS protocol versions and cipher suites should a modern ASP.NET Core application support, and how do you configure Kestrel to enforce a minimum acceptable TLS version? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 105 | Why is it important to validate a server's TLS certificate when making outbound HttpClient calls to external services, and what's the risk of disabling certificate validation? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 106 | What is Angular's DomSanitizer service and when would you need to use it? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Intermediate |
| 107 | How do database roles help simplify managing permissions for multiple users with similar access needs? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Intermediate |
| 108 | How do you create a Redis ACL user with permissions restricted to only specific commands and a specific pattern of keys? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Intermediate |
| 109 | What are Redis ACL categories, and how do they simplify granting permissions for groups of related commands? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Intermediate |
| 110 | Why is enforcing certificate pinning important for a Flutter app handling genuinely sensitive data, and how does it help protect against a man in the middle attack? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Intermediate |
| 111 | How do you protect API keys and secrets that the app needs? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 112 | How do you protect API keys and secrets that the app needs? .NET MAUI › Security & Authentication | .NET MAUI | Security & Authentication | Advanced |
| 113 | What is cross site scripting, often called XSS, and how does React protect against it by default? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Beginner |
| 114 | Why is it risky to build a link's web address directly from user input without checking it first? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Beginner |
| 115 | What is cross site scripting, often called XSS, and how does Angular protect against it by default? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Beginner |
| 116 | Why should you avoid storing sensitive information, like an authentication token, directly in an Angular app's local storage? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Beginner |
| 117 | Why is it important to never expose sensitive information like API keys inside client components? Next.js › Security Best Practices in Next.js | Next.js | Security Best Practices in Next.js | Beginner |
| 118 | What is the difference between a SQL Server login and a database user? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Beginner |
| 119 | What is the difference between Windows Authentication and SQL Server Authentication? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Beginner |
| 120 | Why should sensitive information, such as an API key or a secret token, never be hardcoded directly within a Flutter app's actual source code? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Beginner |
| 121 | How does the flutter_secure_storage package let you securely store sensitive data, such as an authentication token, on a user's device using each platform's own native secure storage mechanism? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Beginner |
| 122 | What is a self-signed certificate, and why is the ASP.NET Core development HTTPS certificate (dotnet dev-certs) not suitable for production use? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 123 | How would you test and verify that an ASP.NET Core application's HTTPS configuration (certificate validity, protocol versions, HSTS header) is correctly configured before or after a production deployment? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 124 | How does the UseHttpsRedirection() middleware determine which port to redirect to, and how do you explicitly configure it when the HTTPS port isn't on the default 443? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 125 | What is dangerouslySetInnerHTML and why does its name include the word dangerously? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Intermediate |
| 126 | Why should you avoid storing sensitive information, like an authentication token, directly in your React app's regular JavaScript state or a global variable? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Intermediate |
| 127 | How do you protect a Next.js application against cross site scripting attacks? Next.js › Security Best Practices in Next.js | Next.js | Security Best Practices in Next.js | Intermediate |
| 128 | What is the principle of least privilege, and how should it guide how you grant permissions in SQL Server? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Intermediate |
| 129 | How do you grant and revoke specific permissions, such as SELECT or EXECUTE, on individual database objects rather than through broader roles? SQL Server › SQL Server Security & Permissions | SQL Server | SQL Server Security & Permissions | Intermediate |
| 130 | How can GuardDuty findings be automatically remediated using EventBridge and Lambda for a faster incident response? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Intermediate |
| 131 | How does GuardDuty support monitoring for threats specific to Amazon S3, EKS, and RDS beyond general EC2 and account level threats? AWS › AWS Security Hub & GuardDuty | AWS | AWS Security Hub & GuardDuty | Intermediate |
| 132 | How can code obfuscation help protect a Flutter app's actual business logic from being easily reverse engineered by an attacker who obtains a copy of the compiled release build? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Intermediate |
| 133 | How should a Flutter app properly validate and sanitize any data received from a server, rather than blindly and unconditionally trusting that all incoming data is genuinely already safe and well formed? Flutter › Flutter App Security Best Practices | Flutter | Flutter App Security Best Practices | Intermediate |
| 134 | How would you configure Kestrel to use a specific X.509 certificate for HTTPS, and what are the different ways to supply that certificate (file-based, certificate store, Azure Key Vault)? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 135 | How would you implement mutual TLS (mTLS) authentication in ASP.NET Core, where the server also validates a client-presented certificate? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 136 | How would you implement automated, zero-downtime certificate renewal using Let's Encrypt (ACME protocol) for a production ASP.NET Core deployment? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 137 | How would you implement Server Name Indication (SNI)-based certificate selection in Kestrel, serving different TLS certificates for different hostnames on the same IP/port? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 138 | How would you configure OCSP stapling or handle certificate revocation checking to ensure a compromised certificate is rejected even if it hasn't yet expired? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 139 | How would you design a certificate rotation strategy that achieves zero downtime, avoiding the risk of an expired certificate causing an outage? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 140 | How would you safely display user generated HTML content, such as a rich text comment, without exposing your app to XSS attacks? React › Security in React (XSS & dangerouslySetInnerHTML) | React | Security in React (XSS & dangerouslySetInnerHTML) | Advanced |
| 141 | How would you safely display user generated HTML content, such as a rich text comment, without exposing your app to XSS attacks? Angular › Angular Security (XSS, Sanitization & CSP) | Angular | Angular Security (XSS, Sanitization & CSP) | Advanced |
| 142 | How would you protect server actions from being called with malicious or unauthorized data, since they can be invoked directly from the client? Next.js › Security Best Practices in Next.js | Next.js | Security Best Practices in Next.js | Advanced |
| 143 | What steps should you take to keep dependencies and the Next.js framework itself secure over time? Next.js › Security Best Practices in Next.js | Next.js | Security Best Practices in Next.js | Advanced |
| 144 | How would you design a comprehensive Redis ACL strategy for an organization with multiple applications and teams accessing the same Redis infrastructure? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Advanced |
| 145 | How do you secure Redis network communication using TLS encryption, and what performance considerations come with enabling it? Redis › Redis Security & ACL | Redis | Redis Security & ACL | Advanced |
| 146 | What is SecureStorage and what is it for? .NET MAUI › Local Storage & Data | .NET MAUI | Local Storage & Data | Beginner |
| 147 | What is SecureStorage and what is it for? .NET MAUI › Local Storage & Data | .NET MAUI | Local Storage & Data | Beginner |
| 148 | How do you select and modify an element's text content? JavaScript › DOM & Events | JavaScript | DOM & Events | Beginner |
| 149 | What is Kestrel, and how does its role in ASP.NET Core hosting differ from a traditional web server like IIS? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Beginner |
| 150 | What is the difference between Kestrel's ListenAnyIP and Listen methods for binding to network addresses? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Beginner |
| 151 | What is the difference between authentication and authorization in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 152 | How should passwords be securely stored in a Node.js application's database, and why is bcrypt commonly used? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 153 | What is the difference between res.set('Cache-Control', 'no-cache') and 'no-store' in an Express response? Node.js › Caching | Node.js | Caching | Beginner |
| 154 | What is the purpose of a .dockerignore file when preparing a Node.js project for cloud deployment? Node.js › Cloud & DevOps | Node.js | Cloud & DevOps | Beginner |
| 155 | What is the difference between the 'to', 'cc', and 'bcc' fields when sending an email programmatically, and why does 'bcc' matter for privacy? Node.js › Email & Notifications | Node.js | Email & Notifications | Beginner |
| 156 | What is the purpose of a .gitignore file in a Node.js project, and what should always be included in it? Node.js › Git & Project Management | Node.js | Git & Project Management | Beginner |
| 157 | What is the difference between a GraphQL query variable and hardcoding a value directly inside the query string? Node.js › GraphQL | Node.js | GraphQL | Beginner |
| 158 | What is the difference between an HTTP request header and a query parameter, and when should each be used to pass information to a Node.js server? Node.js › HTTP & Web Servers | Node.js | HTTP & Web Servers | Beginner |
| 159 | What are the four main methods for creating a child process in Node.js, and how do they differ? Node.js › Child Processes & Process Management | Node.js | Child Processes & Process Management | Beginner |
| 160 | How does the dotenv package work, and what problem does it solve for local Node.js development? Node.js › Environment Variables & Configuration | Node.js | Environment Variables & Configuration | Beginner |
| 161 | How do you add environment variables to a Next.js project? Next.js › Environment Variables & Configuration Management | Next.js | Environment Variables & Configuration Management | Beginner |
| 162 | What is the difference between a regular environment variable and one prefixed with NEXT_PUBLIC in Next.js? Next.js › Environment Variables & Configuration Management | Next.js | Environment Variables & Configuration Management | Beginner |
| 163 | What is a rewrite in Next.js, and how is it different from a redirect? Next.js › Redirects & Rewrites Configuration | Next.js | Redirects & Rewrites Configuration | Beginner |
| 164 | What are the main types of tests you would write for a Next.js application? Next.js › Testing Next.js Applications | Next.js | Testing Next.js Applications | Beginner |
| 165 | What is dynamic data masking in SQL Server, and what problem does it solve? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Beginner |
| 166 | What built-in masking functions are available in SQL Server for dynamic data masking? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Beginner |
| 167 | What is SQL injection, and how does it relate to writing dynamic SQL unsafely? SQL Server › Dynamic SQL | SQL Server | Dynamic SQL | Beginner |
| 168 | What is a linked server in SQL Server, and why would you set one up? SQL Server › Linked Servers | SQL Server | Linked Servers | Beginner |
| 169 | What is the difference between what Transparent Data Encryption protects against compared to Dynamic Data Masking? SQL Server › Transparent Data Encryption | SQL Server | Transparent Data Encryption | Beginner |
| 170 | What is a view in SQL Server, and what benefits does it provide? SQL Server › Views | SQL Server | Views | Beginner |
| 171 | What is redis-cli, and how do you use it to connect to and interact with a Redis server? Redis › Redis CLI & Basic Commands | Redis | Redis CLI & Basic Commands | Beginner |
| 172 | Why is enabling TLS encryption important for a Redis deployment, and what does it actually protect against? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Beginner |
| 173 | What certificate files are required to configure TLS on a Redis server? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Beginner |
| 174 | What is AWS Config and what problem does it help solve? AWS › AWS Config | AWS | AWS Config | Beginner |
| 175 | What is AWS Trusted Advisor and what categories of recommendations does it provide? AWS › AWS Trusted Advisor | AWS | AWS Trusted Advisor | Beginner |
| 176 | What are PHP superglobals, and what are some of the most commonly used ones? PHP › Constants & Superglobals | PHP | Constants & Superglobals | Beginner |
| 177 | How does PHP's built in mail function work, and why is it generally not recommended for production applications? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Beginner |
| 178 | What is PHPMailer, and what advantages does it provide over PHP's built in mail function for sending emails reliably? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Beginner |
| 179 | How does PHP handle file uploads submitted through an HTML form, and what information does the $_FILES superglobal provide? PHP › File Upload Handling | PHP | File Upload Handling | Beginner |
| 180 | How do you move an uploaded file from its temporary location to a permanent storage location using move_uploaded_file? PHP › File Upload Handling | PHP | File Upload Handling | Beginner |
| 181 | How do you retrieve data submitted through an HTML form using PHP, and what is the difference between the GET and POST methods? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Beginner |
| 182 | What is the purpose of validating user submitted form data, and what basic validation checks are commonly performed? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Beginner |
| 183 | What are the three visibility modifiers in PHP, public, protected, and private, and how do they control access to a class's properties and methods? PHP › OOP | PHP | OOP | Beginner |
| 184 | What is PDO in PHP, and what advantages does it provide over older database extensions like mysqli for interacting with a database? PHP › PDO & Databases | PHP | PDO & Databases | Beginner |
| 185 | What is a prepared statement in PDO, and why is using one considered essential for writing secure database queries? PHP › PDO & Databases | PHP | PDO & Databases | Beginner |
| 186 | What is middleware in the context of a web application, and how does it let you run logic before or after a request is handled by its intended route? PHP › Routing & Middleware | PHP | Routing & Middleware | Beginner |
| 187 | What is a session in PHP, and how does it let a web application remember information about a user across multiple separate page requests? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Beginner |
| 188 | What is a cookie, and how does it differ from a session in terms of where the actual data is stored? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Beginner |
| 189 | What is the difference between a WordPress plugin and a WordPress theme, and what kind of functionality does each one typically control? PHP › WordPress Plugin & Theme Development | PHP | WordPress Plugin & Theme Development | Beginner |
| 190 | What are WordPress hooks, specifically actions and filters, and how do they let plugins and themes modify or extend WordPress's default behavior? PHP › WordPress Plugin & Theme Development | PHP | WordPress Plugin & Theme Development | Beginner |
| 191 | What are the main steps involved in preparing a Flutter app for release, before it can actually be submitted to the Google Play Store or Apple App Store? Flutter › App Deployment (Play Store & App Store) | Flutter | App Deployment (Play Store & App Store) | Beginner |
| 192 | What is app signing, and why must every Flutter app be digitally signed before it can be published to either the Google Play Store or the Apple App Store? Flutter › App Deployment (Play Store & App Store) | Flutter | App Deployment (Play Store & App Store) | Beginner |
| 193 | How does the camera package let a Flutter app access a device's camera to capture photos or record video? Flutter › Camera & Media Handling in Flutter | Flutter | Camera & Media Handling in Flutter | Beginner |
| 194 | What is Firebase Authentication, and what different sign in methods does it support out of the box for a Flutter app? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Beginner |
| 195 | How does the geolocator package let you actually properly request and retrieve a user's own genuine current GPS location within a Flutter app? Flutter › Maps & Geolocation in Flutter | Flutter | Maps & Geolocation in Flutter | Beginner |
| 196 | How do you properly request notification permission from a user, and what genuinely differs between how Android and iOS each respectively handle this specific particular permission request? Flutter › Push Notifications in Flutter (FCM) | Flutter | Push Notifications in Flutter (FCM) | Beginner |
| 197 | How do you properly create a table and perform basic insert, query, update, and delete operations using sqflite's own available methods? Flutter › SQLite & Local Databases (sqflite) | Flutter | SQLite & Local Databases (sqflite) | Beginner |
| 198 | How do you sign a MAUI Android app for release? .NET MAUI › Publishing & Deployment | .NET MAUI | Publishing & Deployment | Intermediate |
| 199 | How do you sign a MAUI Android app for release? .NET MAUI › Publishing & Deployment | .NET MAUI | Publishing & Deployment | Intermediate |
| 200 | How do you use the replacer parameter of JSON.stringify() to control what gets serialized? JavaScript › JSON & Data Serialization | JavaScript | JSON & Data Serialization | Intermediate |
| 201 | What is CORS and why does the browser block certain cross-origin requests? JavaScript › Networking: Fetch, XHR, WebSockets & CORS | JavaScript | Networking: Fetch, XHR, WebSockets & CORS | Intermediate |
| 202 | What is the difference between CORS and CSRF protection, and why doesn't a strict CORS policy alone fully protect a cookie-authenticated endpoint? ASP.NET Core › CORS (Cross-Origin Resource Sharing) | ASP.NET Core | CORS (Cross-Origin Resource Sharing) | Intermediate |
| 203 | How do you validate an uploaded file's actual content type (not just its client-supplied extension or Content-Type header) to prevent malicious file uploads? ASP.NET Core › File Uploads & Streaming Large Files | ASP.NET Core | File Uploads & Streaming Large Files | Intermediate |
| 204 | What is the difference between temporary file storage (during processing) and permanent storage for uploaded files, and why should uploads generally not be saved directly to their final destination? ASP.NET Core › File Uploads & Streaming Large Files | ASP.NET Core | File Uploads & Streaming Large Files | Intermediate |
| 205 | Why should the detailed /health endpoint (with full dependency status breakdown) generally not be exposed publicly on the internet, and how do you restrict access to it? ASP.NET Core › Health Checks | ASP.NET Core | Health Checks | Intermediate |
| 206 | How does ASP.NET Core determine the original client IP address and scheme (HTTP/HTTPS) when running behind a reverse proxy that terminates TLS and forwards requests, given the app only sees the proxy's connection? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Intermediate |
| 207 | How do you configure Kestrel to listen on multiple endpoints (different ports, or both HTTP and HTTPS simultaneously)? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Intermediate |
| 208 | How does hosting an ASP.NET Core application in a Docker container change considerations around Kestrel configuration and reverse proxying compared to traditional VM or bare-metal hosting? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Intermediate |
| 209 | What role does a reverse proxy play in TLS/SSL termination, and why is this pattern common in production deployments? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Intermediate |
| 210 | How do you resolve a dependency version conflict manually in Maven using exclusions, and when would this be necessary despite the automatic nearest-wins resolution? Java › Build Tools: Maven & Gradle | Java | Build Tools: Maven & Gradle | Intermediate |
| 211 | What is the purpose of the -Xverify:none (or newer -noverify) JVM flag, and why is disabling bytecode verification generally discouraged? Java › Class Loading & Bytecode Verification | Java | Class Loading & Bytecode Verification | Intermediate |
| 212 | How would you implement object serialization using ObjectOutputStream/ObjectInputStream, and what does the Serializable marker interface and serialVersionUID actually do? Java › I/O & NIO | Java | I/O & NIO | Intermediate |
| 213 | How would you use InetAddress to perform DNS resolution (converting a hostname to an IP address) programmatically, and what's the difference between InetAddress.getByName() and getAllByName()? Java › Java Networking & HTTP Client | Java | Java Networking & HTTP Client | Intermediate |
| 214 | How does HttpClient handle automatic following of HTTP redirects (3xx responses), and how would you configure or disable this behavior? Java › Java Networking & HTTP Client | Java | Java Networking & HTTP Client | Intermediate |
| 215 | What is a JSON Web Token (JWT), and what are its three parts? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 216 | What is Role-Based Access Control (RBAC), and how would you implement it as Express middleware? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 217 | What is CSRF (Cross-Site Request Forgery), and how do you protect a Node.js session-based application against it? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 218 | How do you implement email verification and password-reset flows securely in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 219 | How would you implement Attribute-Based Access Control (ABAC) in a Node.js application when RBAC roles aren't expressive enough? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 220 | What is the risk of caching sensitive or user-specific data with a shared cache key, and how do you avoid it? Node.js › Caching | Node.js | Caching | Intermediate |
| 221 | What is negative caching, and why might you deliberately cache the fact that a lookup returned 'not found'? Node.js › Caching | Node.js | Caching | Intermediate |
| 222 | What role do secret managers (like AWS Secrets Manager) play in deploying a Node.js app across dev, staging, and production? Node.js › Cloud & DevOps | Node.js | Cloud & DevOps | Intermediate |
| 223 | What is a reverse proxy, and why is Nginx commonly placed in front of a Node.js application in production? Node.js › Cloud & DevOps | Node.js | Cloud & DevOps | Intermediate |
| 224 | What is the difference between spawning a Worker Thread and spawning a Child Process for running a CPU-intensive JavaScript function? Node.js › Clustering & Worker Threads | Node.js | Clustering & Worker Threads | Intermediate |
| 225 | What does the node:crypto module provide, and what's the difference between hashing and encryption? Node.js › Core Node.js Modules | Node.js | Core Node.js Modules | Intermediate |
| 226 | What is SQL injection, and how does using parameterized queries in Node.js prevent it? Node.js › Databases | Node.js | Databases | Intermediate |
| 227 | What is a .env file, and how does it interact with a Dockerized Node.js application's configuration? Node.js › Docker & Deployment | Node.js | Docker & Deployment | Intermediate |
| 228 | How do Kubernetes ConfigMaps and Secrets differ, and how are they typically consumed by a Node.js pod? Node.js › Docker & Deployment | Node.js | Docker & Deployment | Intermediate |
| 229 | What is the difference between transactional email and marketing email, and why do most Node.js applications use separate providers or sending domains for each? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 230 | What is an unsubscribe mechanism, and what specific requirements does it need to meet for compliance with regulations like CAN-SPAM? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 231 | What is the risk of exposing a raw error's stack trace in an API response, and how do you prevent it while still logging full details server-side? Node.js › Error Handling | Node.js | Error Handling | Intermediate |
| 232 | What is middleware in Express, and what is the significance of the order in which middleware is registered? Node.js › Express & Middleware | Node.js | Express & Middleware | Intermediate |
| 233 | What is CORS middleware in Express, and how does the cors package simplify configuring Cross-Origin Resource Sharing? Node.js › Express & Middleware | Node.js | Express & Middleware | Intermediate |
| 234 | How would you validate and restrict uploaded file types and sizes using multer to prevent malicious or oversized uploads? Node.js › File Uploads & Media Processing | Node.js | File Uploads & Media Processing | Intermediate |
| 235 | What is GraphQL introspection, and why might you want to disable it in a production environment? Node.js › GraphQL | Node.js | GraphQL | Intermediate |
| 236 | What is the difference between HTTP/1.1 and HTTP/2, and how does Node.js support HTTP/2 via the node:http2 module? Node.js › HTTP & Web Servers | Node.js | HTTP & Web Servers | Intermediate |
| 237 | What is the purpose of the HTTP OPTIONS method, and how does it relate to CORS preflight requests? Node.js › HTTP & Web Servers | Node.js | HTTP & Web Servers | Intermediate |
| 238 | How do JWTs, OAuth, and Passport.js fit together in a typical Node.js authentication architecture? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 239 | How would you implement 'Sign in with GitHub' using Passport's OAuth strategy in an Express application? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 240 | How do you validate a JWT's claims (issuer, audience, expiration) beyond just verifying its cryptographic signature? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 241 | How would you implement a simple rate limiter using Redis's INCR command with expiration? Node.js › Caching with Redis | Node.js | Caching with Redis | Intermediate |
| 242 | What is a multi-stage Docker build, and how does it produce a smaller final image for a Node.js application? Node.js › Docker & Containerization for Node.js | Node.js | Docker & Containerization for Node.js | Intermediate |
| 243 | What is the risk of accidentally logging or exposing environment variables that contain secrets, and how do you prevent it? Node.js › Environment Variables & Configuration | Node.js | Environment Variables & Configuration | Intermediate |
| 244 | How does Node's node:https module differ from node:http, and what additional configuration does it require? Node.js › HTTP & HTTPS Modules | Node.js | HTTP & HTTPS Modules | Intermediate |
| 245 | How do you implement service-to-service authentication in a Node.js microservices architecture, so internal services can trust requests from each other? Node.js › Microservices Architecture with Node.js | Node.js | Microservices Architecture with Node.js | Intermediate |
| 246 | What are the main benefits of using Server Components in a real React app? React › Server Components | React | Server Components | Intermediate |
| 247 | How do you add validation to a reactive form field, and how do you show an error message to the user? Angular › Forms | Angular | Forms | Intermediate |
| 248 | What is an HTTP interceptor in Angular, and what is it commonly used for? Angular › HTTP Client & Interceptors | Angular | HTTP Client & Interceptors | Intermediate |
| 249 | How do you handle different HTTP methods such as GET, POST, and DELETE within a single API route file? Next.js › API Routes | Next.js | API Routes | Intermediate |
| 250 | How can you use middleware to protect multiple routes at once for authentication? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Intermediate |
| 251 | How do you set a cookie in Next.js, such as after a user logs in? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Intermediate |
| 252 | Why should database queries always happen on the server rather than in the browser? Next.js › Database Integration with Next.js | Next.js | Database Integration with Next.js | Intermediate |
| 253 | How do you fetch draft or unpublished content differently from published content when Draft Mode is enabled? Next.js › Draft Mode & Preview Mode | Next.js | Draft Mode & Preview Mode | Intermediate |
| 254 | How would you validate that all required environment variables are present and correctly formatted before your app starts? Next.js › Environment Variables & Configuration Management | Next.js | Environment Variables & Configuration Management | Intermediate |
| 255 | How do you configure Next.js to allow optimizing images that are hosted on an external domain? Next.js › Image & Font Optimization | Next.js | Image & Font Optimization | Intermediate |
| 256 | How do you write an end to end test that simulates a user navigating through your Next.js application in a real browser? Next.js › Testing Next.js Applications | Next.js | Testing Next.js Applications | Intermediate |
| 257 | How do you grant a specific user or role permission to see the real, unmasked data despite dynamic data masking being applied? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Intermediate |
| 258 | Does dynamic data masking prevent a determined user from working around it to see the real underlying values? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Intermediate |
| 259 | How do you remove dynamic data masking from a column once it is no longer needed? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Intermediate |
| 260 | How do you safely use sp_executesql to execute dynamic SQL with parameters, avoiding the risks of simple string concatenation? SQL Server › Dynamic SQL | SQL Server | Dynamic SQL | Intermediate |
| 261 | How would you build a dynamic SQL query where the table or column names themselves need to change based on input, since parameters cannot be used for object names? SQL Server › Dynamic SQL | SQL Server | Dynamic SQL | Intermediate |
| 262 | How do you test and verify that a linked server connection is working correctly after it has been configured? SQL Server › Linked Servers | SQL Server | Linked Servers | Intermediate |
| 263 | What is the hierarchy of encryption keys and certificates involved in setting up Transparent Data Encryption? SQL Server › Transparent Data Encryption | SQL Server | Transparent Data Encryption | Intermediate |
| 264 | Why is it critically important to back up the certificate used for Transparent Data Encryption, and what happens if it is lost? SQL Server › Transparent Data Encryption | SQL Server | Transparent Data Encryption | Intermediate |
| 265 | How do you check whether Transparent Data Encryption is currently enabled on a specific database? SQL Server › Transparent Data Encryption | SQL Server | Transparent Data Encryption | Intermediate |
| 266 | What are the most important configuration settings to review and adjust when preparing a Redis instance for production use? Redis › Redis Architecture & Installation | Redis | Redis Architecture & Installation | Intermediate |
| 267 | What licensing considerations should you be aware of when using Redis modules in a commercial product? Redis › Redis Modules Overview | Redis | Redis Modules Overview | Intermediate |
| 268 | What Kubernetes resources are typically needed to properly expose and configure a Redis deployment for other applications within the same cluster to use? Redis › Redis with Docker & Kubernetes | Redis | Redis with Docker & Kubernetes | Intermediate |
| 269 | How does mutual TLS authentication differ from standard one way TLS, and why would you enable it for Redis? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Intermediate |
| 270 | How do you configure a Redis client application, such as one using the redis-py library, to connect over TLS? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Intermediate |
| 271 | What is the role of certificate expiration monitoring in maintaining a secure, always available Redis deployment? Redis › TLS & Encryption in Redis | Redis | TLS & Encryption in Redis | Intermediate |
| 272 | What Specialty certifications does AWS offer, and who are they designed for? AWS › AWS Certification Paths & Career Roadmap | AWS | AWS Certification Paths & Career Roadmap | Intermediate |
| 273 | How does CloudTrail log file integrity validation help ensure that audit logs have not been tampered with? AWS › AWS CloudTrail & Auditing | AWS | AWS CloudTrail & Auditing | Intermediate |
| 274 | What is a Config conformance pack, and how does it simplify compliance management at scale? AWS › AWS Config | AWS | AWS Config | Intermediate |
| 275 | What is the AWS Landing Zone or AWS Control Tower, and how does it help set up a well architected multi account environment quickly? AWS › AWS Organizations & Multi Account Strategy | AWS | AWS Organizations & Multi Account Strategy | Intermediate |
| 276 | How do AWS WAF managed rule groups simplify protecting applications against common, well known attack patterns? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Intermediate |
| 277 | How does rate based rules in AWS WAF help mitigate application layer DDoS attacks and abusive traffic patterns? AWS › AWS WAF & Shield | AWS | AWS WAF & Shield | Intermediate |
| 278 | How does a Network Load Balancer's preservation of the client's source IP address benefit certain applications compared to an Application Load Balancer? AWS › Elastic Load Balancing (ALB, NLB & CLB) | AWS | Elastic Load Balancing (ALB, NLB & CLB) | Intermediate |
| 279 | What is the principle of least privilege in IAM, and what practical strategies help apply it effectively? AWS › IAM | AWS | IAM | Intermediate |
| 280 | What is type juggling in PHP, and how does it affect comparisons between values of different types? PHP › Basics & Types | PHP | Basics & Types | Intermediate |
| 281 | How does the $_SERVER superglobal provide useful information about the current request and server environment? PHP › Constants & Superglobals | PHP | Constants & Superglobals | Intermediate |
| 282 | How do environment variables and .env files help manage different configuration settings across development, staging, and production environments? PHP › Deployment & Hosting for PHP Applications | PHP | Deployment & Hosting for PHP Applications | Intermediate |
| 283 | What role does a reverse proxy like Nginx play in front of a PHP application in a typical production deployment architecture? PHP › Deployment & Hosting for PHP Applications | PHP | Deployment & Hosting for PHP Applications | Intermediate |
| 284 | What is SMTP authentication, and why is properly configuring it important for ensuring email deliverability? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Intermediate |
| 285 | How do SPF, DKIM, and DMARC email authentication records help improve email deliverability and prevent your domain from being used for email spoofing? PHP › Email Sending in PHP (PHPMailer & SMTP) | PHP | Email Sending in PHP (PHPMailer & SMTP) | Intermediate |
| 286 | How do you check whether a file or directory exists, and how do you retrieve useful metadata like a file's size or last modified time? PHP › File Handling & File System Functions | PHP | File Handling & File System Functions | Intermediate |
| 287 | Why is server side validation always necessary even when client side JavaScript validation is already in place on a form? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Intermediate |
| 288 | How does PHP's filter_var function help validate and sanitize different types of user input, such as emails, URLs, and integers? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Intermediate |
| 289 | How do modern PHP frameworks like Laravel simplify form validation compared to writing manual validation checks by hand? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Intermediate |
| 290 | How can PHP objects implementing the JsonSerializable interface customize exactly how they are converted into JSON when passed to json_encode? PHP › JSON Handling in PHP | PHP | JSON Handling in PHP | Intermediate |
| 291 | How does Laravel's Blade templating engine simplify writing views compared to writing raw PHP directly within HTML files? PHP › Laravel Framework Essentials | PHP | Laravel Framework Essentials | Intermediate |
| 292 | How do database transactions work in PDO, and why are they important for ensuring multiple related database operations either all succeed together or all fail together? PHP › PDO & Databases | PHP | PDO & Databases | Intermediate |
| 293 | How do you configure PDO's error handling mode to ensure database errors are properly reported as catchable exceptions rather than silently failing? PHP › PDO & Databases | PHP | PDO & Databases | Intermediate |
| 294 | What is a multi stage Docker build, and how does it help produce a smaller, more secure production image for a PHP application? PHP › PHP with Docker | PHP | PHP with Docker | Intermediate |
| 295 | How do environment variables and Docker secrets help manage application configuration and sensitive credentials differently across development and production containerized environments? PHP › PHP with Docker | PHP | PHP with Docker | Intermediate |
| 296 | How does authentication typically work for a RESTful API, and what is the difference between session based authentication and token based authentication using something like a JSON Web Token? PHP › RESTful API Development with PHP | PHP | RESTful API Development with PHP | Intermediate |
| 297 | How does API rate limiting work, and why is it an important protection mechanism for a public facing RESTful API? PHP › RESTful API Development with PHP | PHP | RESTful API Development with PHP | Intermediate |
| 298 | How can route groups let you apply shared configuration, such as a common URL prefix or a set of middleware, to several related routes at once? PHP › Routing & Middleware | PHP | Routing & Middleware | Intermediate |
| 299 | What are the httponly and secure flags on a cookie, and why are they important for protecting session cookies specifically? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Intermediate |
| 300 | What is session fixation, and how does regenerating the session identifier after a successful login help prevent this attack? PHP › Sessions & Cookies | PHP | Sessions & Cookies | Intermediate |
| 301 | How does the WordPress plugin file structure typically work, including the required plugin header comment that WordPress uses to recognize and display a plugin? PHP › WordPress Plugin & Theme Development | PHP | WordPress Plugin & Theme Development | Intermediate |
| 302 | Why is properly sanitizing input and escaping output especially critical in WordPress plugin and theme development, and what built in WordPress functions help with this? PHP › WordPress Plugin & Theme Development | PHP | WordPress Plugin & Theme Development | Intermediate |
| 303 | What is Apple's App Store review process, and what are some common reasons an app submission might be rejected during that review? Flutter › App Deployment (Play Store & App Store) | Flutter | App Deployment (Play Store & App Store) | Intermediate |
| 304 | How do you properly request and handle runtime camera and photo library permissions in a Flutter app, and what happens if a user denies that permission? Flutter › Camera & Media Handling in Flutter | Flutter | Camera & Media Handling in Flutter | Intermediate |
| 305 | How can a CI/CD pipeline securely handle sensitive signing credentials, such as an Android keystore file or an iOS certificate, needed to produce a properly signed release build? Flutter › CI/CD Pipelines for Flutter Apps | Flutter | CI/CD Pipelines for Flutter Apps | Intermediate |
| 306 | How should a Flutter app properly handle a deep link that points to a specific screen requiring the user to first be authenticated, if that user is not actually currently logged in yet? Flutter › Deep Linking in Flutter | Flutter | Deep Linking in Flutter | Intermediate |
| 307 | How does Firebase Dynamic Links, or a similar deferred deep linking service, let a deep link correctly work even when the target app is not yet actually installed, directing the user to install it first before then opening the intended content? Flutter › Deep Linking in Flutter | Flutter | Deep Linking in Flutter | Intermediate |
| 308 | How do you properly set up Flutter's global error handling using FlutterError.onError and PlatformDispatcher.instance.onError to automatically capture every uncaught error and forward it to a crash reporting service? Flutter › Error Handling & Crash Reporting (Sentry & Crashlytics) | Flutter | Error Handling & Crash Reporting (Sentry & Crashlytics) | Intermediate |
| 309 | How do you properly implement Google sign in specifically within a Flutter app, and what additional setup steps beyond simply configuring Firebase itself does this particular sign in method actually require? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 310 | How do you properly implement email verification and password reset functionality using Firebase Authentication's built in features? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Intermediate |
| 311 | How can a Flutter desktop app properly access the native operating system's own file system, such as letting a user open or save an actual local file, using the file_picker or similar dedicated packages? Flutter › Flutter for Desktop (Windows, macOS, Linux) | Flutter | Flutter for Desktop (Windows, macOS, Linux) | Intermediate |
| 312 | How do you properly implement encryption for a Hive box specifically to properly protect genuinely sensitive data stored directly on a user's own device from being easily read by another potentially malicious app? Flutter › Hive & NoSQL Local Storage | Flutter | Hive & NoSQL Local Storage | Intermediate |
| 313 | How does SharedPreferences actually genuinely work differently underneath on Android compared to iOS, in terms of exactly what genuine underlying native storage mechanism each platform actually respectively uses? Flutter › Local Data Storage with SharedPreferences | Flutter | Local Data Storage with SharedPreferences | Intermediate |
| 314 | Why should genuinely sensitive data, such as an authentication token or a password, never actually be stored using regular SharedPreferences, and what should genuinely be used instead? Flutter › Local Data Storage with SharedPreferences | Flutter | Local Data Storage with SharedPreferences | Intermediate |
| 315 | How should you properly and correctly handle requesting location permissions across the several genuinely different possible permission states, including denied, granted, and permanently denied, using the geolocator or permission_handler packages? Flutter › Maps & Geolocation in Flutter | Flutter | Maps & Geolocation in Flutter | Intermediate |
| 316 | How do you properly perform a JOIN query in sqflite to combine genuinely related data stored across two or more separate distinct tables, such as combining orders together with their own individual customer information? Flutter › SQLite & Local Databases (sqflite) | Flutter | SQLite & Local Databases (sqflite) | Intermediate |
| 317 | How do you protect data at rest in a MAUI app? .NET MAUI › Local Storage & Data | .NET MAUI | Local Storage & Data | Advanced |
| 318 | How do you implement authentication token refresh transparently for API calls? .NET MAUI › Networking & APIs | .NET MAUI | Networking & APIs | Advanced |
| 319 | How do you set up CI/CD for a MAUI app? .NET MAUI › Publishing & Deployment | .NET MAUI | Publishing & Deployment | Advanced |
| 320 | How do you protect data at rest in a MAUI app? .NET MAUI › Local Storage & Data | .NET MAUI | Local Storage & Data | Advanced |
| 321 | How do you implement authentication token refresh transparently for API calls? .NET MAUI › Networking & APIs | .NET MAUI | Networking & APIs | Advanced |
| 322 | How do you set up CI/CD for a MAUI app? .NET MAUI › Publishing & Deployment | .NET MAUI | Publishing & Deployment | Advanced |
| 323 | How do cookies differ from localStorage for storing data? JavaScript › Browser Storage & Web APIs | JavaScript | Browser Storage & Web APIs | Advanced |
| 324 | How do you safely parse potentially untrusted JSON without exposing your app to prototype pollution? JavaScript › JSON & Data Serialization | JavaScript | JSON & Data Serialization | Advanced |
| 325 | What is a CORS preflight request, and which requests trigger one? JavaScript › Networking: Fetch, XHR, WebSockets & CORS | JavaScript | Networking: Fetch, XHR, WebSockets & CORS | Advanced |
| 326 | How would you implement direct-to-cloud-storage uploads (bypassing your API server entirely) using pre-signed URLs, and why is this approach preferred for very large files? ASP.NET Core › File Uploads & Streaming Large Files | ASP.NET Core | File Uploads & Streaming Large Files | Advanced |
| 327 | How would you implement virus/malware scanning for uploaded files before they're made available for download by other users? ASP.NET Core › File Uploads & Streaming Large Files | ASP.NET Core | File Uploads & Streaming Large Files | Advanced |
| 328 | How would you configure Kestrel to be production-ready when running standalone (without IIS or another reverse proxy in front of it), and what risks does this expose you to? ASP.NET Core › Hosting Models: Kestrel, IIS & Reverse Proxies | ASP.NET Core | Hosting Models: Kestrel, IIS & Reverse Proxies | Advanced |
| 329 | What is bytecode verification, and what specific categories of invalid or unsafe bytecode does the JVM's verifier reject before allowing a class to run? Java › Class Loading & Bytecode Verification | Java | Class Loading & Bytecode Verification | Advanced |
| 330 | How does HashMap's internal implementation work (hashing, bucket array, treeification), and how did its collision-handling strategy change in Java 8? Java › Collections Framework | Java | Collections Framework | Advanced |
| 331 | How would you use Lombok's @EqualsAndHashCode and @ToString annotations to eliminate equals()/hashCode()/toString() boilerplate, and what specific configuration options handle inheritance and field exclusion correctly? Java › equals(), hashCode() & toString() Contracts | Java | equals(), hashCode() & toString() Contracts | Advanced |
| 332 | What are Node.js's experimental permission model flags, and what problem do they address? Node.js › Advanced Node.js | Node.js | Advanced Node.js | Advanced |
| 333 | How do you implement JWT refresh token rotation in a Node.js API, and why is it more secure than a single long-lived token? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 334 | How does the OAuth 2.0 Authorization Code flow work, and what role does Node.js typically play as the client or the resource server? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 335 | What is Multi-Factor Authentication (MFA), and how would you implement Time-based One-Time Password (TOTP) support in a Node.js app? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 336 | What is the principle of least privilege, and how does it apply to designing an authorization system for a multi-tenant Node.js SaaS application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 337 | Why should a Node.js Docker container generally run as a non-root user, and how do you configure this in a Dockerfile? Node.js › Docker & Deployment | Node.js | Docker & Deployment | Advanced |
| 338 | What are SPF, DKIM, and DMARC, and why do they matter for a Node.js application's transactional emails actually reaching users' inboxes? Node.js › Email & Notifications | Node.js | Email & Notifications | Advanced |
| 339 | How would you handle email delivery webhooks (bounces, complaints, opens) sent from a provider like SendGrid back to a Node.js application? Node.js › Email & Notifications | Node.js | Email & Notifications | Advanced |
| 340 | How would you design a notification preference center allowing users to control which types of notifications they receive via which channels? Node.js › Email & Notifications | Node.js | Email & Notifications | Advanced |
| 341 | What is the difference between a 4xx and 5xx HTTP status code from an error-handling perspective, and how should a Node.js API decide which to return? Node.js › Error Handling | Node.js | Error Handling | Advanced |
| 342 | How would you implement automatic error reporting to a service like Sentry in a Node.js application, and what data should be scrubbed before sending? Node.js › Error Handling | Node.js | Error Handling | Advanced |
| 343 | How would you implement request validation middleware in Express using a schema-validation library like Zod or Joi? Node.js › Express & Middleware | Node.js | Express & Middleware | Advanced |
| 344 | How would you implement direct-to-S3 file uploads from a client, avoiding routing large file uploads through your Node.js server entirely? Node.js › File Uploads & Media Processing | Node.js | File Uploads & Media Processing | Advanced |
| 345 | How would you scan uploaded files for malware before accepting them into permanent storage in a Node.js application? Node.js › File Uploads & Media Processing | Node.js | File Uploads & Media Processing | Advanced |
| 346 | How would you handle a Node.js project's dependency vulnerabilities reported by 'npm audit' as part of a CI/CD pipeline? Node.js › Git & Project Management | Node.js | Git & Project Management | Advanced |
| 347 | How would you implement authentication and authorization in a GraphQL API in Node.js, given there's typically only a single HTTP endpoint? Node.js › GraphQL | Node.js | GraphQL | Advanced |
| 348 | How would you implement query complexity analysis or depth limiting in a GraphQL API to prevent a maliciously deep or expensive query from overwhelming the server? Node.js › GraphQL | Node.js | GraphQL | Advanced |
| 349 | How would you implement HTTP request timeout and connection management on the server side in Node.js to protect against slow-loris style attacks? Node.js › HTTP & Web Servers | Node.js | HTTP & Web Servers | Advanced |
| 350 | What is token introspection, and when is it needed instead of simply verifying a JWT's signature locally? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 351 | What is PKCE (Proof Key for Code Exchange), and why is it now recommended for OAuth flows even in traditional server-side Node.js applications? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 352 | How do you handle a child process that hangs or never terminates, and what's the correct way to enforce a timeout? Node.js › Child Processes & Process Management | Node.js | Child Processes & Process Management | Advanced |
| 353 | How would you implement authentication and authorization in a GraphQL API, given all requests typically go through a single endpoint? Node.js › GraphQL with Node.js | Node.js | GraphQL with Node.js | Advanced |
| 354 | How would you implement HTTP/2 server push or basic HTTP/2 support in Node.js using the node:http2 module? Node.js › HTTP & HTTPS Modules | Node.js | HTTP & HTTPS Modules | Advanced |
| 355 | How do you implement role based authorization, where different users see different content based on their role? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 356 | What are best practices for securely storing and validating authentication tokens in a Next.js app? Next.js › Authentication & Authorization in Next.js | Next.js | Authentication & Authorization in Next.js | Advanced |
| 357 | What caching pitfalls should you watch out for when building a Next.js application with dynamic, user specific data? Next.js › Caching | Next.js | Caching | Advanced |
| 358 | What is the difference between storing session data in a signed cookie versus a server side session store? Next.js › Cookies & Session Management in Next.js | Next.js | Cookies & Session Management in Next.js | Advanced |
| 359 | What deployment strategies help minimize downtime and risk when releasing a new version of a Next.js application? Next.js › Deployment | Next.js | Deployment | Advanced |
| 360 | How would you set up a comprehensive error handling strategy across a large Next.js application with many route segments? Next.js › Error Handling & Not Found Pages | Next.js | Error Handling & Not Found Pages | Advanced |
| 361 | How would you handle file uploads through a form using a server action in Next.js? Next.js › Form Handling & Validation in Next.js | Next.js | Form Handling & Validation in Next.js | Advanced |
| 362 | What structured data, also known as schema markup, can you add to a Next.js page to improve how it appears in search results? Next.js › Metadata API & SEO Optimization | Next.js | Metadata API & SEO Optimization | Advanced |
| 363 | How would you build a webhook endpoint that automatically revalidates your site whenever content changes in an external content management system? Next.js › On-Demand Revalidation Strategies | Next.js | On-Demand Revalidation Strategies | Advanced |
| 364 | How would you implement rate limiting inside a route handler to prevent abuse of a public API endpoint? Next.js › Route Handlers (API Route.js) | Next.js | Route Handlers (API Route.js) | Advanced |
| 365 | How do you set custom response headers, such as CORS headers, in a route handler to allow requests from a different domain? Next.js › Route Handlers (API Route.js) | Next.js | Route Handlers (API Route.js) | Advanced |
| 366 | How would you set up a testing strategy that balances unit, integration, and end to end tests for a large Next.js application? Next.js › Testing Next.js Applications | Next.js | Testing Next.js Applications | Advanced |
| 367 | How would you apply dynamic data masking to an existing table with sensitive columns as part of a broader compliance initiative, such as meeting data privacy regulations? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Advanced |
| 368 | How does dynamic data masking behave differently when a masked column is used in a JOIN, WHERE clause, or exported through an application, compared to a simple SELECT query? SQL Server › Dynamic Data Masking | SQL Server | Dynamic Data Masking | Advanced |
| 369 | How would you design a layered set of views to progressively simplify a complex data model for different types of users, such as analysts versus casual business users? SQL Server › Views | SQL Server | Views | Advanced |
| 370 | How would you design a session management system that supports both a sliding expiration for active users and an absolute maximum session lifetime regardless of activity? Redis › Session Management with Redis | Redis | Session Management with Redis | Advanced |
| 371 | What is the difference between edge optimized, regional, and private API Gateway endpoints? AWS › Amazon API Gateway | AWS | Amazon API Gateway | Advanced |
| 372 | What is DNSSEC, and how does Route 53 support it to protect against DNS spoofing? AWS › Amazon Route 53 & DNS Management | AWS | Amazon Route 53 & DNS Management | Advanced |
| 373 | How does AWS Glue support sensitive data handling through features like the Glue Data Quality and Sensitive Data Detection capabilities? AWS › AWS Glue & ETL | AWS | AWS Glue & ETL | Advanced |
| 374 | How does AWS CloudHSM differ from KMS, and when would an organization need the additional control it provides? AWS › AWS KMS & Data Encryption | AWS | AWS KMS & Data Encryption | Advanced |
| 375 | How should an organization design a comprehensive container image governance strategy across multiple ECR repositories, teams, and AWS accounts? AWS › Elastic Container Registry (ECR) | AWS | Elastic Container Registry (ECR) | Advanced |
| 376 | How should an organization design a comprehensive IAM governance strategy combining permission boundaries, service control policies, and regular access reviews across a growing organization? AWS › IAM | AWS | IAM | Advanced |
| 377 | How does S3 Object Lock support compliance requirements for write once read many, or WORM, data storage? AWS › S3 & Storage | AWS | S3 & Storage | Advanced |
| 378 | How should a team manage Composer dependencies securely and reliably across development, staging, and production environments, including handling private packages? PHP › Composer | PHP | Composer | Advanced |
| 379 | How do you set a global exception handler and error handler in PHP to consistently catch and log any uncaught exceptions or errors across an entire application? PHP › Error & Exception Handling | PHP | Error & Exception Handling | Advanced |
| 380 | What best practices should guide how an application logs, reports, and responds to exceptions differently across development and production environments? PHP › Error & Exception Handling | PHP | Error & Exception Handling | Advanced |
| 381 | How do stream wrappers and stream contexts in PHP allow file functions to work seamlessly with non local resources like remote URLs or cloud storage? PHP › File Handling & File System Functions | PHP | File Handling & File System Functions | Advanced |
| 382 | How does Cross-Site Request Forgery protection work for form submissions, and why is including a CSRF token in every form considered essential? PHP › Form Handling & Validation | PHP | Form Handling & Validation | Advanced |
| 383 | How does Laravel's middleware system let you filter and process HTTP requests before they reach your application's route handlers, and how do you create custom middleware? PHP › Laravel Framework Essentials | PHP | Laravel Framework Essentials | Advanced |
| 384 | What is catastrophic backtracking in regular expressions, and how can a poorly constructed pattern cause a severe performance problem or even hang a PHP application? PHP › Regular Expressions in PHP | PHP | Regular Expressions in PHP | Advanced |
| 385 | How does middleware priority and ordering affect application behavior when multiple middleware, such as authentication and rate limiting, are applied to the same route together? PHP › Routing & Middleware | PHP | Routing & Middleware | Advanced |
| 386 | How do PHP's string comparison functions and operators handle edge cases involving numeric looking strings, and why is strict, type aware comparison important when working with strings that could be misinterpreted as numbers? PHP › Strings & String Functions | PHP | Strings & String Functions | Advanced |
| 387 | How does the WordPress database abstraction layer, specifically the global $wpdb object, let you safely run custom database queries beyond what the standard WordPress functions already provide? PHP › WordPress Plugin & Theme Development | PHP | WordPress Plugin & Theme Development | Advanced |
| 388 | How can automated accessibility testing be integrated into a Flutter app's test suite to catch accessibility regressions before they reach production? Flutter › Accessibility in Flutter Apps | Flutter | Accessibility in Flutter Apps | Advanced |
| 389 | How can custom keys, breadcrumbs, and user context attached to a crash report help a development team dramatically speed up diagnosing and reproducing a genuinely difficult, hard to reproduce production issue? Flutter › Error Handling & Crash Reporting (Sentry & Crashlytics) | Flutter | Error Handling & Crash Reporting (Sentry & Crashlytics) | Advanced |
| 390 | How does linking multiple different authentication providers to a single Firebase user account work, letting a user sign in using either Google or email and password while still resolving to the exact same underlying account? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Advanced |
| 391 | How can custom claims in Firebase Authentication be used to implement role based access control, such as distinguishing between a regular user and an administrator within your app? Flutter › Firebase Authentication in Flutter | Flutter | Firebase Authentication in Flutter | Advanced |
| 392 | How do you properly handle a breaking native API change on one specific platform, such as a new required Android permission model, while genuinely still maintaining backward compatibility for consumers of your plugin using an older version of that same platform? Flutter › Flutter Plugin & Package Development | Flutter | Flutter Plugin & Package Development | Advanced |
| 393 | What are important battery usage and privacy considerations when continuously tracking a user's own real time location in the background, such as for a genuine fitness tracking app or a delivery driver app? Flutter › Maps & Geolocation in Flutter | Flutter | Maps & Geolocation in Flutter | Advanced |
| 394 | How should you properly implement request and response logging for debugging purposes, while genuinely and carefully ensuring genuinely sensitive data, such as an authentication token or a password, is never actually accidentally logged in plain readable text? Flutter › Networking with HTTP & Dio | Flutter | Networking with HTTP & Dio | Advanced |
| 395 | How should a backend server properly and securely send targeted push notifications through FCM using the Firebase Admin SDK, rather than relying purely on manually sending them directly through the Firebase console? Flutter › Push Notifications in Flutter (FCM) | Flutter | Push Notifications in Flutter (FCM) | Advanced |