| 1 | What is HSTS (HTTP Strict Transport Security), and how does UseHsts() in ASP.NET Core implement it? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 2 | What is certificate pinning, and why is it generally discouraged for typical web API scenarios despite its security benefits? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 3 | How would you implement Server Name Indication (SNI)-based certificate selection in Kestrel, serving different TLS certificates for different hostnames on the same IP/port? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Advanced |
| 4 | How do you enforce that all HTTP requests to an ASP.NET Core application are redirected to HTTPS? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 5 | What is the difference between a certificate's public key and private key, and why must the private key never be exposed or committed to source control? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Beginner |
| 6 | What TLS protocol versions and cipher suites should a modern ASP.NET Core application support, and how do you configure Kestrel to enforce a minimum acceptable TLS version? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 7 | Why is it important to validate a server's TLS certificate when making outbound HttpClient calls to external services, and what's the risk of disabling certificate validation? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 8 | What is a self-signed certificate, and why is the ASP.NET Core development HTTPS certificate (dotnet dev-certs) not suitable for production use? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 9 | How would you test and verify that an ASP.NET Core application's HTTPS configuration (certificate validity, protocol versions, HSTS header) is correctly configured before or after a production deployment? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |
| 10 | How does the UseHttpsRedirection() middleware determine which port to redirect to, and how do you explicitly configure it when the HTTPS port isn't on the default 443? ASP.NET Core › HTTPS, Certificates & Transport Security | ASP.NET Core | HTTPS, Certificates & Transport Security | Intermediate |